Shape secure product development at gaiia as a Senior Security Engineer, applying threat modelling and application security across remote teams.This senior, hands-on position protects customer-facing workflows and products through practical security engineering. You will review architecture, authentication, authorization, tenant isolation, and sensitive workflows across TypeScript-based services. The role also includes penetration testing, remediation, bug bounty ownership, and developer partnership.Key Responsibilities:
Perform threat modelling and architecture reviewsReview authentication, authorization, and tenant isolationRun internal penetration tests and label security issuesPartner with developers to implement effective remediationsBuild and maintain a bug bounty programRequirements:
At least five years in software or application securityStrong experience securing up-to-date web applications and APIsExperience with React, GraphQL, and distributed systemsExperience with penetration testing, bug bounty, and SASTAbility to review architecture and identify practical security risksUse application security, secure development, and communication skills to strengthen gaiia’s products and customer workflows.