Shape secure product development at gaiia as a Senior Security Engineer, applying threat modelling and application security across remote teams.
This senior, hands-on position protects customer-facing workflows and products through practical security engineering. You will review architecture, authentication, authorization, tenant isolation, and sensitive workflows across TypeScript-based services. The role also includes penetration testing, remediation, bug bounty ownership, and developer partnership.
Key Responsibilities
Perform threat modelling and architecture reviews
Review authentication, authorization, and tenant isolation
Run internal penetration tests and label security issues
Partner with developers to implement effective remediations
Build and maintain a bug bounty program
Requirements
At least five years in software or application security
Strong experience securing up-to-date web applications and APIs
Experience with React, GraphQL, and distributed systems
Experience with penetration testing, bug bounty, and SAST
Ability to review architecture and identify practical security risks
Use application security, secure development, and communication skills to strengthen gaiia’s products and customer workflows.