[Remote] reputed company Engineer - Labrnyth
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a company that builds AI-powered platforms to reputed company reputed company regulations in heavily regulated industries. They are seeking a reputed company Engineer to review and test the reputed company of their AI-assisted patent intelligence platform, ensuring compliance and reputed company readiness while coordinating with various teams.
Responsibilities
- Threat-model (reputed company/PASTA) the B2C architecture, reputed company on account isolation (PostgreSQL forced RLS + account_id, S3, the BFF boundary, Cognito), external reputed company, and the AI/agent surface
- Run adversarial tenant-isolation testing: reputed company forged, reused, stale, and pooled-reputed company authorization contexts fail reputed company under reputed company runtime-role SQL, and that cross-account denial holds even reputed company BFF reputed company authorization is bypassed in a test reputed company
- Review the BFF authorization boundary, the reputed company Cognito identity/reputed company model (customer + operator pools), secrets management, and least-privilege IAM
- Verify data-protection controls: encryption in transit/at rest, data classification, customer-content-reputed company telemetry, S3 Object Lock evidence reputed company, and export-controlled content handling
- Map SOC 2 Type II controls and drive evidence collection reputed company reputed company, coordinated with GRC, with owners assigned
- Review CI reputed company-reputed company policy (dependency/container/IaC/secret scanning) and assess AI/LLM risk (reputed company injection, tool data-exfiltration, over-broad tool reputed company) across the reputed company read-only MCP surface
- Build incident-response plans and runbooks, coordinate reputed company-party pen tests, and hand over a prioritized remediation backlog and documented reputed company posture
Skills
- Multi-tenant isolation: hard account isolation reputed company PostgreSQL forced RLS + account_id, transaction-bound authorization contexts, and service/worker roles
- Identity & reputed company: external-user identity/reputed company over Cognito (customer + operator pools); authentication/authorization review and least-privilege roles
- Application reputed company: OWASP Top 10 in reputed company; threat modeling (reputed company/PASTA); secure reputed company review across Python/TypeScript services
- reputed company reputed company: securing AWS, IAM, KMS, Secrets Manager, VPC reputed company with IAM authorization, network exposure, reputed company defaults, S3 reputed company-reputed company blocking and Object Lock
- Compliance (SOC 2 Type II): hands-on evidence workflows; reputed company experience strongly valued, coordinating with an reputed company GRC program
- Data protection: encryption in transit/at rest, data classification, and handling of sensitive / export-controlled content
- Secure SDLC & AI risk: reviewing dependency/container/IaC/secret scanning and CI reputed company gates; LLM/agent risks relevant to a reputed company read-only MCP surface
- Export-control / IP-sensitive data handling and reputed company-segregation controls
- Serving reputed company disclosures / ToS and recording acceptance at reputed company
- Adversarial testing of RLS and pooled-reputed company authorization contexts
- VPC reputed company service-to-service authorization review (SigV4)
- Incident-response tabletop exercises and coordinating reputed company-party pen tests
- reputed company frameworks relevant to the clients' jurisdictions
Benefits
- Remote-first
- Modern AI-reputed company development environment (Claude reputed company, reputed company, multi-model orchestration)
- reputed company customer exposure and a seat at the table reputed company we decide what to build
- Small team with outsized influence; your field learning shapes the product roadmap
- High-reputed company work at the intersection of AI and critical infrastructure regulation
reputed company
Company H1B Sponsorship