Note: The job is a remote job and is open to candidates in USA. STRAVEXA is seeking a Senior Security Engineer to support a security engineering project that bridges automated security scanning and remediation systems with product engineering teams. The role focuses on threat modeling, vulnerability triage and exploitability validation, automated patch quality assurance, and driving security issues through verified production resolution.
Responsibilities
- Strong hands-on experience in Application/Product Security Engineering
- Experience with Threat Modeling, including trust boundaries, attack surfaces, data flows, STRIDE/PASTA
- Strong knowledge of CWE, CVE, OWASP Top 10, vulnerability severity, and remediation SLAs
- Ability to reproduce vulnerabilities, build PoCs, and create test harnesses
- Strong programming skills in at least 2 of: C++, Go, Java, Python
- Strong debugging and source-code review experience
- Knowledge of secure coding practices, input validation, boundary checking, and safe memory access
- Experience validating automated/AI-generated security patches, including code-diff review and regression testing
- Ability to work directly with product engineering teams and drive vulnerabilities through verified resolution
- SAST/DAST and automated security scanning experience
- Fuzz testing and differential testing
- Experience with distributed/microservice architectures
- Experience with AI/agentic code-generation or automated remediation tools
- Prompt tuning/debugging of automated coding agents
Skills
- Strong hands-on experience in Application/Product Security Engineering
- Experience with Threat Modeling, including trust boundaries, attack surfaces, data flows, STRIDE/PASTA
- Strong knowledge of CWE, CVE, OWASP Top 10, vulnerability severity, and remediation SLAs
- Ability to reproduce vulnerabilities, build PoCs, and create test harnesses
- Strong programming skills in at least 2 of: C++, Go, Java, Python
- Strong debugging and source-code review experience
- Knowledge of secure coding practices, input validation, boundary checking, and safe memory access
- Experience validating automated/AI-generated security patches, including code-diff review and regression testing
- Ability to work directly with product engineering teams and drive vulnerabilities through verified resolution
- SAST/DAST and automated security scanning experience
- Fuzz testing and differential testing
- Experience with distributed/microservice architectures
- Experience with AI/agentic code-generation or automated remediation tools
- Prompt tuning/debugging of automated coding agents
Company Overview