Security Engineer

About this role

Bynder seeks a Security Engineer to embed security across their cloud-native SaaS platform, covering application security, cloud infrastructure, and DevSecOps. You'll work directly with the VP Information Security to scale security practices while enabling rapid business growth for a 600+ person company serving leading global brands.

What you'll do

• Plan and execute penetration tests against web applications, APIs, and cloud infrastructure; manage external pentest engagements
• Lead threat modeling and security assessments integrated into the SDLC in collaboration with engineering teams
• Own AWS cloud security posture using tools like Wiz to prioritize risks and drive shift-left workflows
• Champion security controls in CI/CD pipelines including IaC scanning, SAST integration, and secure deployment practices
• Support security incident response, investigation, and detection/response workflow maturation
• Translate compliance requirements (SOC2, ISO 42001, GDPR) into technical controls and advise on AI/ML security risks

What they're looking for

• Application security and penetration testing (web apps, APIs, cloud environments)
• AWS cloud security (IAM, VPC design, cloud-native architecture)
• SAST/DAST tools and DevSecOps practices
• OWASP Top 10 and common vulnerability assessment
• Threat modeling and security architecture
• CI/CD pipeline security and IaC scanning
• Clear communication with technical and non-technical stakeholders
• Incident response and investigation