Senior Security Engineer (AppSec)

About the Role

We are looking for a Senior Application Security Engineer to join Miro Product Security team, and help drive the Secure Development Lifecycle and strengthen our Application Security posture.

Each role at Miro is based at one of our physical hubs, and we look for talent that want to be part of these local, collaborative communities. Mironeers work in a hybrid model, with a 3 days a week in office culture as our baseline.

About the Team

The product security team focuses on every aspect of Miro product security, We bring controls on each stage of the secure SDLC and provide a secure infrastructure, helping teams to build features, secure by design. We work closely with the Engineering organization to raise and keep Miro security at the highest level.

What you’ll do

• You will play a key role in the Product Security team, building a Secure SDLC based in Automation,  you will conduct security design reviews, threat modeling and contribute to embedding security in engineering processes and tooling. You will engage and influence across the engineering and product teams, building strong relationships in favor of building a secure product by default.  By using your experience of Application security, APIs, Microservices and AWS you will contribute to improve our defenses to ensure the product is robust and ready to face the current threat landscape. You will contribute to evolving our secure coding guidelines, and security knowledgebase. 
• As a SME in Application Security technologies you will continuously research to identify changes in the threat landscape, in order to adapt our Application security controls and SDLC strategy. 

 What you’ll need

• Strong security experience in Web Application and API security
• Experience with microservice, API gateway, service mesh architecture security
• Experience in SDLC, Appsec and vulnerability management at scale
• Experience in AWS
• Experience working in a highly diverse, multicultural and distributed organization. 
• Ability to gain trust and set up good relationships with different stakeholders.
• Automation and programming skills (Python, Java)

What’s in it for you

• Competitive equity package
• Medical Insurance coverage
• Allowance to facilitate remote working during WFH period
• Weekly remote team activities to keep the spirits high
• Opportunity to work for a truly global multicultural team
• Lunch, snacks and drinks provided when back in the office