Chief Cybersecurity Defender

Job DescriptionThe Security Software Engineer will systematically reduce the attack surface by addressing high-priority security risks using Snyk as the primary scanning tool.They will identify, prioritize, and remediate dependencies with known exploitable vulnerabilities.Vulnerability Analysis: Analyze the results of Snyk scans of their codebases (Ruby, Go, Python, JavaScript).Prioritization: Critically assess Snyk reports to distinguish between theoretical vulnerabilities and those that are genuinely exploitable within the context of their applications.Targeted Remediation: Plan and execute targeted dependency upgrades or apply patches specifically to fix the prioritized exploitable vulnerabilities, ensuring minimal disruption to the system.Code & Test Validation: Refactor code and update unit/integration tests as necessary to support the upgraded dependencies and validate the fixes.Collaboration & Documentation: Work closely with internal security and engineering teams, participate in code reviews, and clearly document the rationale for each remediation.About this RoleThis role requires a strong background in software development and security.The ideal candidate will have experience working with code analysis tools and have a solid understanding of secure coding practices.ResponsibilitiesAnalyze codebases to identify vulnerabilities and prioritize remediation efforts.Develop and implement strategies to reduce the attack surface of our systems.Work closely with internal teams to ensure seamless integration and minimal disruption to our services.RequirementsBachelor's degree in Computer Science or related field.Minimum 3 years of experience in software development and security.Proficient in programming languages such as Ruby, Go, Python, and JavaScript.Familiarity with code analysis tools such as Snyk.Strong understanding of secure coding practices and threat modeling.