Information Security Engineer – Remote

About the role

G-P is seeking an Information Security Engineer to strengthen its application security program. Working remotely, you will partner with engineering teams to identify, assess, and remediate security vulnerabilities across web technologies.

Key responsibilities

• Participate in threat modeling exercises with engineering teams.
• Triage SCA, SAST, DAST, and CSPM findings, eliminating false positives and delivering vetted vulnerabilities.
• Support vulnerability management for networks and infrastructure.
• Collaborate with engineers to ensure timely remediation of security findings.
• Conduct security assessments, internal penetration tests, and application security reviews.
• Develop scripts and tools to automate security tasks such as log analysis, patch management, and incident detection.
• Build custom integrations for security tools using Python, JavaScript, or Go.

Required profile

• Bachelor’s degree in Computer Science or related field, or equivalent experience.
• 3+ years of experience in application security, including threat modeling, secure design reviews, code reviews, and penetration testing.
• Strong communication skills and business acumen.

Required skills

• Python, Go, JavaScript
• AWS security and engineering
• Linux, Docker, Terraform
• REST API programming
• SCA, SAST, DAST, CSPM tools
• Web application penetration testing (CTFs, bug bounty)
• Threat modeling, secure design reviews, code reviews, pen‑testing

What we offer

• Competitive compensation and benefits.
• Remote‑first, flexible work environment.
• Opportunities to expand skills and influence global work practices.