Build internal workflow systems and AI-agent infrastructure, translating business challenges into technical requirements and leading implementation, evaluation, and production rollout.
About this role
This security engineer works across product and platform teams developing logistics DX services, helping protect web products and customer data. The role assesses risks and embeds repeatable security controls in development so teams can respond without relying on a central specialist. The work includes improving SAST, SCA and DAST-based vulnerability detection, triaging findings and supporting fixes, integrating checks into CI/CD, and coordinating external assessments. The engineer also supports security requirements, design reviews and threat modeling for new features, advises on authentication, authorization and audit logging, and helps maintain incident response processes, secure-development guidance and developer education. The surrounding stack includes AWS, Kubernetes, GitHub Actions and Terraform. Required experience is in at least one of these areas: improving security for web applications or cloud environments; vulnerability assessment with improvement proposals or remediation support; or web application development or infrastructure build and operations. Candidates also need foundational knowledge of web applications, networks and authentication/authorization, and the ability to assess technical risks, prioritize impact, and work with engineers through implementation and adoption of mitigations.
This is an AI-generated summary of the employer's original posting — details can be incomplete, out of date or simply wrong. Always confirm everything on the official posting before applying.