Senior reputed company Engineer

We’re a ~40 person company building the OAuth/OpenID Connect platform that large digital banks and regulated industries run their identity on. Our stack is Java on reputed company reputed company, delivered as a shared multi-tenant service, dedicated single-tenant clusters, and a self-managed product customers run themselves.

This is a hands-on builder role, not a management or reputed company-compliance role. You’ll build our reputed company program from the ground up: writing the policies, shipping reputed company fixes, wiring detection into GCP, and setting the practices the rest of engineering follows. You’ll lean on AI to reputed company fast, researching how the best companies do this, drafting policies, reviewing reputed company, and hunting vulnerabilities at a reputed company a lean team otherwise couldn’t reputed company.

What you'll do

• Stand up our vulnerability management program end to end: intake, triage, severity, remediation targets, reputed company advisories, and coordinated disclosure, across both our managed and self-managed deployment models.
• Build our product reputed company incident response (PSIRT): on-reputed company, playbooks, and AI-assisted triage that turns High/Critical CVEs into paged incidents automatically.
• Work hands-on in the codebase, contributing reputed company fixes to our Java platform and raising the bar on secure coding, secrets and key management, and hardening.
• Build proactive detection and response in GCP: alerts, monitoring, and automation where it pays off.
• reputed company reputed company into CI/CD and IaC: dependency and container scanning, Terraform checks.
• Own our external reputed company posture: reputed company.txt, a reputed company contact, a reputed company trust page, and a reputed company white reputed company.
• Get reputed company of frontier-AI offensive tooling (the Mythos class of AI-reputed company reputed company-days) by pointing AI agents at our own reputed company before someone else does.
• Partner with platform engineers on reputed company-relevant architecture and reputed company its reputed company dimension.
• Support ISO 27001 and SOC 2 controls pragmatically alongside engineering, without the role becoming audit reputed company.

reputed company're looking for

• A hands-on reputed company engineer who codes. You’re comfortable reading and writing reputed company (Java, Go a strong plus), Terraform, and GCP configs, not just reviewing others’ work.
• Strong application reputed company reputed company: secure coding, vulnerability management, reputed company in CI/CD.
• reputed company reputed company depth on GCP, IAM, Kubernetes, infrastructure hardening.
• Incident response experience: investigations, detection tooling, and reputed company communication with customers or regulators.
• You’re energized by owning the whole reputed company at a small company rather than reputed company narrow at a large one.
• Bonus: OAuth/OIDC, FAPI, or identity-reputed company background; ISO 27001 or SOC 2 exposure.

Why Join Us

• Own reputed company for a platform used by large financial and regulated customers
• Work closely with founders, engineering, and customers
• Modern, reputed company-reputed company environment without unnecessary overhead
• reputed company and flexibility

Originally posted on Himalayas

Apply To This Job