RunPod

1 week ago

Full Stack Security Engineer (Application & Product)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Secure Runpod’s customer-facing products, APIs, and internal services by embedding with engineering teams to bake security in from the start. Own product security work including threat modeling, architecture and code reviews, and vulnerability remediation across Python, Go, and JavaScript/TypeScript. Build DevSecOps guardrails by implementing SAST/DAST/SCA in CI/CD, strengthen edge/application defenses with WAF and API gateway protections, and support compliance efforts and bug bounty triage.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Lead threat modeling, architecture reviews, and code reviews for web applications, APIs, and microservices.
•Develop and commit code to remediate security flaws in Python, Go, and JavaScript/TypeScript codebases.
•Implement and manage SAST/DAST/SCA security testing in CI/CD pipelines to catch vulnerabilities early.
•Configure and manage application-layer security controls including WAF, bot protection, and API gateways.
•Collaborate on compliance with SOC 2, ISO 27001, and GDPR and participate in bug bounty triage.

Pay and Benefits

Salary: USD 152,000 - 175,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDentalVisionRemote WorkHome Office

Key Requirements

•5+ years of experience in application security, product security, or as a software engineer with a heavy security focus.
•Strong programming and code-review skills in Python, Go, JavaScript/TypeScript (or similar modern stacks).
•Deep understanding of web app vulnerabilities (OWASP Top 10), API security (REST/GraphQL), and authentication flows (OAuth, OIDC, JWT).
•Hands-on experience with offensive web security testing tools (e.g., Burp Suite, ZAP).
•Experience building and maintaining automated security pipelines (DevSecOps).

Experience:5+ yearsApplication securityDevSecOpsProduct security

Skills:OwnershipProactiveAbility to translate risks into engineering tasks

Certifications:OSWEGWAPTCISSP

Tech Stack:PythonGoJavaScriptTypeScriptOAuthOIDCJWTRESTGraphQLCI/CDSASTDASTSCAWeb Application Firewalls (WAF)API gatewaysKubernetesDockerMicroservicesBurp SuiteZAP

Eligibility

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

RunPod

Provides on-demand GPU cloud and marketplace services for machine learning workloads, offering rentable GPU instances, scalable compute for training and inference, and tools to run ML jobs cost-effectively without long-term commitments.

Industry: Cloud Computing

Website

Loading job details...

Preparing the role view and application actions.

RunPod

1 week ago

Full Stack Security Engineer (Application & Product)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Lead threat modeling, architecture reviews, and code reviews for web applications, APIs, and microservices.
•Develop and commit code to remediate security flaws in Python, Go, and JavaScript/TypeScript codebases.
•Implement and manage SAST/DAST/SCA security testing in CI/CD pipelines to catch vulnerabilities early.
•Configure and manage application-layer security controls including WAF, bot protection, and API gateways.
•Collaborate on compliance with SOC 2, ISO 27001, and GDPR and participate in bug bounty triage.

Pay and Benefits

Salary: USD 152,000 - 175,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDentalVisionRemote WorkHome Office

Key Requirements

•5+ years of experience in application security, product security, or as a software engineer with a heavy security focus.
•Strong programming and code-review skills in Python, Go, JavaScript/TypeScript (or similar modern stacks).
•Deep understanding of web app vulnerabilities (OWASP Top 10), API security (REST/GraphQL), and authentication flows (OAuth, OIDC, JWT).
•Hands-on experience with offensive web security testing tools (e.g., Burp Suite, ZAP).
•Experience building and maintaining automated security pipelines (DevSecOps).

Experience:5+ yearsApplication securityDevSecOpsProduct security

Skills:OwnershipProactiveAbility to translate risks into engineering tasks

Certifications:OSWEGWAPTCISSP

Tech Stack:PythonGoJavaScriptTypeScriptOAuthOIDCJWTRESTGraphQLCI/CDSASTDASTSCAWeb Application Firewalls (WAF)API gatewaysKubernetesDockerMicroservicesBurp SuiteZAP

Eligibility

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

RunPod

Industry: Cloud Computing

Website