Staff Software Engineer - Application Security (SAST,DAST,IAST) B2B Contract

Job Description

Opendoor is seeking a Staff Software Engineer - Application Security to join their team in Krakow, Poland. This is a B2B contract role requiring a minimum of 3 days a week in the office. The Application Security Engineer will be responsible for driving a 'Shift-Left' security approach by integrating automated security tooling into developer workflows and CI/CD pipelines. They will work closely with product and development teams to ensure secure systems and applications, identify security improvement areas, and drive high-impact security initiatives.

The role involves educating engineers on security practices, conducting threat modeling, design reviews, code reviews, and addressing application security vulnerabilities. The Security Operations team at Opendoor focuses on identifying and protecting assets, detecting anomalies and attacks, responding to compromise, and recovering from asset compromise.

Responsibilities:

• Champion security design across application code and cloud infrastructure
• Implement and manage SAST, DAST and IAST tools for automated security testing
• Evaluate and deploy security scanning tools (e.g., Snyk, Semgrep, GitHub Advanced Security, CodeQL)
• Provide architectural guidance and mentorship to up-level the security engineering organization
• Identify and prioritize risks, attack surfaces, and vulnerabilities
• Perform security code reviews and advise developers on remediating vulnerabilities and following secure coding practices
• Conduct research to identify new attack vectors
• Automated cloud security assessment and policy enforcement
• Educate engineers about common security issues
• Collaborate with teams to embed security throughout the software lifecycle
• Triaging vulnerabilities and tracking issues to resolution
• Manage the bug bounty program

Requirements:

• Bachelor's degree in Computer Science, Information Security, or a related field
• 7+ years of experience in application security
• Foundational knowledge of operating system security for Linux and of the CWE Top 25
• Experience in risk assessment, threat modeling, code reviews, incident response, and vulnerability management
• Strong programming/scripting skills in Python, Golang, Ruby or similar languages

Opendoor offers:

• Hybrid work environment