Note: The job is a remote job and is open to candidates in USA. Gravadee is an early-stage rental technology company building a Universal Rental Application that enables renters to assemble, verify, and securely share rental information with landlords. The Senior Application Security Engineer or Consultant will independently review the application's architecture and implementation, identify launch-blocking security and privacy risks, recommend practical fixes, and assess readiness for a controlled production launch.
Responsibilities
- Inspect the actual implementation
- Identify meaningful security or privacy risks
- Separate launch-blocking issues from improvements that can reasonably wait
- Recommend practical fixes appropriate for an early-stage startup
- Give us a clear assessment of whether the application is appropriate for a small, controlled production launch
- Authentication and account security
- API security
- Database permissions and access controls
- Secrets and API-key management
- Stripe and Plaid integrations
- Sensitive-data flows
- Logging and potential unintended data retention
- Account deletion and data lifecycle
- Common web application vulnerabilities
- Production configuration and deployment risks
Skills
- Experienced Application Security Engineer or Security Consultant
- Strong experience with several of the following:
- Application security / product security
- SaaS or fintech security
- API security
- Stripe and/or Plaid integrations
- Authentication and authorization
- Cloud application architecture
- Privacy engineering
- OWASP testing
- Security reviews of early-stage products
- Experience reviewing AI-assisted or low-code applications is a plus
- Senior engineer or consultant
Benefits
- Remote work arrangement
Company Overview