Note: The job is a remote job and is open to candidates in USA. GBIT (Global Bridge InfoTech Inc) is seeking a Security Engineer to bridge automated security scanning and remediation systems with product code owners. The role focuses on threat modeling, vulnerability triage, exploitability validation, quality assurance of automated patches, secure code reviews, and coordinating verified production resolution.
Responsibilities
- Document trust boundaries, data flows, and architectural entry points to maintain up-to-date threat profiles for high-priority services
- Filter and triage findings from automated source and endpoint scanners, classifying severity and evaluating exception requests
- Construct minimal test environments and reproduction harnesses to validate exploitability and eliminate false positives
- Supervise and QA code patches generated by automated/agentic remediation tools, running unit and integration tests to check for regressions
- Route validated patches to product team code owners and coordinate end-to-end deployment verification within strict SLAs
- Conduct code reviews and ensure all fixes comply with secure coding standards (e.g., input validation, memory safety)
Skills
- Proficiency in reading and writing code in at least two core languages (C++, Go, Java, Python) with local harness/PoC setup experience
- Practical experience with CWE, CVE, OWASP Top 10, scanner findings evaluation, and queue hygiene
- Hands-on expertise evaluating code diffs, input validation, boundary checking, and verifying automated patch efficacy
- An operational, hands-on Security Engineer with a strong software development background who excels at bridge-building between security automation and product development teams
- The candidate should be highly methodical, possessing strong code analysis skills to spot hallucinated or regression-prone automated fixes and validate real-world exploitability
- Experience with structured threat modeling frameworks (e.g., STRIDE, PASTA) for microservices
- Practical knowledge of fuzz testing, sandbox execution, and differential testing frameworks
- Experience debugging or prompt-tuning automated/agentic code generation tools
- Familiarity with dynamic (DAST) and static (SAST) scanning platforms
Company Overview
Company H1B Sponsorship