Product Security Engineer, Aiven

• Experience with one or more programming languages
• Excellent written and verbal communication skills
• Experience building or reviewing threat models
• Experience conducting security assessments, including penetration testing
• Experience in cloud security architecture and infrastructure (preferably AWS)
• 5+ years of product security or application security experience
• Experience with Python and SQL

Desirable

• We are looking for a Product Security Engineer to work on our cloud operations platform with a specific focus on Information Security
• The Product Security team is responsible for making sure Aiven products and services are safe and secure through vulnerability discovery and remediation advice
• This is an application security generalist position with some architect responsibilities
• Your responsibilities will include source code auditing, code reviews, developing threat models, collaborating on new features and software architecture designs, and finding ways to empower engineering teams to build secure software by default
• You will also act in an advisory role to other teams
• Conduct network and/or application penetration testing
• Risk assessments and security reviews for new products, technologies, and services
• Secure development practices including threat modeling and security testing
• Create security guidance and documentation
• Find security issues in our products, services, and open source projects
• Suggest and sometimes prototype changes that lead to security improvements
• Develop and deliver security training and outreach to internal development teams
• Assist with incident and bug bounty handling including triage, analysis, and delegation of remediation
• Perform network scans and interpret results
• Gather and interpret evidence of Aiven’s information security program and controls for audit purposes
• Evaluate which controls are necessary to meet control objectives