Lead Software Engineer (Security)

About the Role

As a Lead Software Engineer supporting the Security team, you will play a critical role in ensuring the security and integrity of our software applications. Your expertise will be instrumental in identifying and addressing potential security vulnerabilities while implementing secure coding practices. Working closely with a new engineering team, you will lead them in adopting best practices for application security and ensuring compliance with relevant security standards and regulations.

Specific Responsibilities

• Lead a Scrum team, focusing on the development of new features, refactoring, and improvement of core applications.
• Conduct comprehensive evaluations of web application security, including in-depth analysis of OWASP Top Ten vulnerabilities and effective mitigation techniques.
• Define rigorous security requirements and lead detailed analysis, emphasizing secure coding practices, vulnerability assessment, and penetration testing.
• Develop and implement effective remediations for vulnerabilities using cutting-edge security assessment tools such as SAST/DAST vulnerability scanners and penetration testing frameworks.
• Take ownership of key services and design complex architectural deliverables, demonstrating both breadth and depth of knowledge in building software products and services.
• Guide the team throughout product development by actively engaging in Daily Scrum, Sprint Planning, and Backlog Grooming sessions.
• Perform meticulous Code Reviews, craft robust unit tests, document code, and implement software best practices.
• Collaborate seamlessly with QA engineers to design and execute testing protocols aimed at identifying and rectifying defects and performance impacts efficiently.
• Build and maintain excellent working relationships with peers across multiple departments, including QA, Development, Project Management, and User Experience (UX).
• Contribute actively to the entire Software Development Life Cycle (SDLC) from ideation and design to full implementation, release, and deployment.
• Assess emerging software technologies and evaluate third-party solutions to identify and integrate best-suited solutions.
• Provide production support of services when required.

Required Qualifications

• Bachelor’s degree or equivalent experience in Computer Science, Information Security, or a related field.
• At least 10+ years of professional development experience as a software engineer.
• Proven experience in application security, including secure coding practices, vulnerability assessment, and penetration testing.
• Expert knowledge and understanding of secure software development principles and methodologies.
• At least 10 years of experience in Java and commonly used programming languages, including their security vulnerabilities and controls.
• Team Leadership or Principal Engineer experience.
• Strong experience with Java Unit Testing Frameworks such as JUnit, TestNG, and Mockito.
• Experience working with continuous integration and continuous deployment (CI/CD) systems.
• Ability to coach, mentor, and train junior team members.
• Strong analytical thinking with the ability to simplify complex problems, processes, or projects into component parts and evaluate them systematically.
• Independent thinker with creative, resourceful, and proactive problem-solving skills.
• Experience working with Git or other version control systems.
• Good understanding & working experience with cloud computing platforms such as Azure Cloud.
• Strong communication skills, both verbal and written, with the ability to convey complex security concepts to technical and non-technical stakeholders.

Desired Qualifications

• Relevant security certifications (e.g., CISSP, CEH, OSCP) are a plus.
• Experience with Docker/containerization.
• Knowledge of microservices architecture and Service-Oriented Architecture (SOA).
• Experience working with Enterprise SaaS systems.

Why Join us?

Compensation and Benefits: We offer a competitive salary and benefits package aligned with local standards.

Work-Life Balance: our client is remote-first company, offering flexible work options that foster creativity and motivation. We also provide generous paid time off, including holidays, wellness days, and a company-wide soft close between Christmas and New Year’s.

Career Growth and Development: Our client promotes internal career growth, offering employees opportunities to develop skills through training, education, and mentorship.

Culture: Our diverse team thrives on a #OneTeam philosophy, embracing Agile methodologies and a culture of collaboration and innovation. We are committed to diversity, inclusion, and building a supportive work environment where everyone feels valued.

How to Apply

If you’re passionate about software engineering with a focus on security and eager to join a dynamic, fast-growing team, we want to hear from you!

Apply Now and Be Part of Our Mission!