Shape secure product development at gaiia as a Senior Security Engineer, applying threat modelling and application security across remote teams. This senior, hands-on position protects customer-facing workflows and products through practical security engineering. You will review architecture, authentication, authorization, tenant isolation, and sensitive workflows across TypeScript-based services. The role also includes penetration testing, remediation, bug bounty ownership, and developer partnership. Key Responsibilities:
Perform threat modelling and architecture reviews Review authentication, authorization,
and tenant isolation Run internal penetration tests and label security issues Partner with developers to implement effective remediations Build and maintain a bug bounty program Requirements:
At least five years in software or application security Solid experience securing modern web applications and APIs Experience with React, GraphQL, and distributed systems Experience with penetration testing, bug bounty, and SAST Ability to review architecture and identify practical security risks Use application security, secure development, and communication skills to strengthen gaiia’s products and customer workflows.