Lead Application Security Engineer

What this role involves

Ivo is hiring a Lead Application Security Engineer to own security of their contract intelligence platform. The role involves hands-on vulnerability hunting, code review, threat modeling, and managing pen test and disclosure programs. The ideal candidate has 4+ years in application security and deep experience with TypeScript, Python, and cloud security.

Skills this posting asks for

• application security
• product security
• offensive security
• web application pen testing
• typescript
• node
• python
• owasp top 10
• oauth
• oidc
• saml
• sso
• multi-tenant isolation
• api security
• cloud security
• gcp
• azure
• container security
• kubernetes security
• pen test management
• bug bounty
• responsible disclosure
• security champions
• sast

Requirements

• 4 years of experience
• Level: lead

From the employer’s posting

WHY JOIN IVO? Every civilization runs on the same infrastructure: agreements between people who don't fully trust each other. Sumerians pressed them into clay. Romans carved them into stone. We bury them in 80-page PDFs.   The way those agreements are reviewed hasn't changed in four thousand yea…