Help secure CI/CD pipelines: GitHub Actions hardening, runner security, dependency management, supply-chain integrity.
Operate and improve the AppSec tooling stack: SAST, SCA, container scanning, secrets detection.
Build and maintain reusable security workflows and templates for engineering teams.
Write automation in Python, GitHub API, or custom Actions to solve security problems at scale.
Triage vulnerabilities with context
learn to read the code, assess exploitability, and communicate real risk.
Support the Security Champions program and help developers adopt secure coding practices.

2-4 years in a security, DevOps, or software engineering role with exposure to application security.
Familiarity with CI/CD pipelines (GitHub Actions, GitLab CI, or similar)
Exposure to SAST, SCA, or container scanning tools
you have used them, even if you have not run them at scale.
You write code
Python preferred; Go, Node.js, or shell also welcome
Basic understanding of cloud platforms (AWS preferred) and containerised workloads.
Curiosity and a bias toward building things rather than writing policies.
Experience with GitHub.
Advanced Security or CodeQL
Familiarity with supply-chain security concepts (SLSA, Sigstore, software bill of materials).
Step Security / Harden-Runner exposure.
Any inner-source, platform engineering, or developer tooling background.
Security certifications or formal security training.

Security Application Engineer – Flutter Functions

Key skills