FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Application Security and Secure Software Development, with a strong focus on implementing security practices across cloud-native architectures and modern web application stacks. Proficient in managing bug bounty programs and utilizing security assessment tools to enhance software security.
Highest-signal resume keywords
Application SecuritySecure Software DevelopmentSAST/DAST/IAST ToolsBug Bounty Program ManagementOWASP Top 10
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Secure Software Development LifecycleThreat ModelingSecurity Design ReviewsCloud-Based Application SecuritySecurity AssessmentsRemediation StrategiesSecurity FixesApplication Security PrinciplesCI/CD PipelinesAPIs
Soft Skills
Excellent Communication SkillsMentoringGrowth Mindset
Tools & Technologies
SASTDASTIASTSecurity ScannersAppSec Tools
Certifications & Qualifications
OSCPGWAPTCISSPCSSLP
Industry Keywords
Cloud-Native ArchitecturesSecurity PosturePragmatic Risk MitigationDeveloper-Friendly LanguageThird-Party Testing Engagements
Tech Stack
Tools & technologiesCloud
About the role
Key responsibilities & impact- Shape and own HoneyBook’s Secure Software Development Lifecycle (SSDLC)
- Collaborate with engineering teams to define remediation strategies
- Orchestrate agentic workflows that apply security fixes across the application stack
- Design, implement, and drive SSDLC guardrails across the company
- Conduct security design reviews, threat modeling, and proactive production triage
- Orchestrate threat modeling, architecture reviews, and security assessments of cloud-based applications and services
- Manage HoneyBook’s bug bounty program, validate reports, and coordinate response and resolution
- Own and operate AppSec tools including SAST, ASPM, and other security scanners
- Triage findings, prioritize issues, and guide engineering teams toward resolution
- Coordinate findings from penetration tests, automated scanners, and external assessments
- Research application security trends, frameworks, vulnerabilities, and best practices
- Educate and enable engineers, architects, and DevOps teams to build secure software
Requirements
What you’ll need- 3+ years of experience in Application Security, Product Security, or Secure Software Development
- Proven experience with modern web application stacks, cloud-native architectures, APIs, and CI/CD pipelines
- Strong understanding of application security principles, OWASP Top 10, and secure coding best practices
- Experience with SAST/DAST/IAST tools
- Experience managing bug bounty programs and third-party testing engagements
- Excellent communication skills and ability to translate security concepts into developer-friendly language
- Ability to balance pragmatic risk mitigation with product velocity, business needs, and user experience
- Growth mindset and desire to mentor others and continuously improve security posture
- OSCP, GWAPT, CISSP, or CSSLP certifications are a plus but not required
Benefits
Comp & perks- Meaningful equity grants
- Wellness programs
- Exceptional family leave policies
- Health and happiness-focused employee benefits
- Mission-driven, impact-oriented work environment
- Opportunities for innovation and out-of-the-box thinking