Product & Application Security Engineer

Responsibilities

• Perform threat modeling on new features to identify architectural risks
• Review Pull Requests and conduct deep-dive manual code audits
• Triage and fix security alerts from tools like Grype, Cycode, and Wiz
• Implement code fixes for security tech-debt across the stack
• Serve as a Subject Matter Expert on Kubernetes security primitives (RBAC, network policies)
• Oversee the integrity of the secure software supply chain and build dependencies

Requirements

• Competent developer in Go (Golang)
• Exposure to modern frontend frameworks like Vue.js
• Extensive experience working with Kubernetes and its security primitives
• Experience integrating security into the early stages of the SDLC (Shift-Left)
• Familiarity with AppSec and Supply Chain tools such as Grype, Cycode, or Wiz

Preferred Qualifications

• Experience with Public Cloud environments (Azure, AWS, or GCP)
• Experience with On-Prem K8s distributions like OpenShift or Tanzu

About the Company

Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient. Headquartered in Seattle, Veeam protects over 550,000 customers worldwide.