Security Engineer

About this role

The Security Engineer at Rain will focus on enhancing application security throughout the engineering lifecycle, including conducting assessments and vulnerability scanning. This role requires collaboration with product and development teams to ensure efficient remediation of security issues and to integrate automated security practices into the development process.

What you'll do

• Lead application security assessments and vulnerability scanning
• Collaborate with product and development teams on security remediation
• Integrate automated security tools in CI/CD pipelines
• Develop application security standards and patterns
• Conduct threat modeling and risk assessments for new features
• Support incident response for application security events

What they're looking for

• 4-8+ years in security engineering or application security
• Experience with security tools like Semgrep and Burp Suite
• Understanding of web and API security vulnerabilities
• Experience in threat modeling and secure design reviews
• Familiarity with cloud security concepts
• Collaborative mindset for practical security solutions
• Knowledge of SDLC and security workflow integration
• Ability to prioritize and drive remediation of security findings

Benefits

• Unlimited vacation policy with a minimum of 10 days off
• Flexible working arrangements, including remote options
• Stipend for creating a comfortable home office
• Opportunities for growth and idea exploration
• Supportive team culture focused on shared impact