Sonar - Staff Security Engineer
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT
Requirements
• You can demonstrate in‑depth experience with cloud architectures - primarily AWS and distributed networks, and you’re motivated to keep exploring how modern cloud patterns can both strengthen and weaken security. • You can demonstrate deep experience with application security assessments, including reviewing code and evaluating authentication and authorization designs with a high level of curiosity and rigor. • You can demonstrate experience assessing and securing AI, Agentic and MCPs, and you are eager to experiment, learn, and define best practices in this fast‑moving space. • You can demonstrate experience in penetration testing, red‑team engagements, and bug bounty programs, and you enjoy thinking like an attacker to protect what matters most. • You can demonstrate experience with vulnerability investigation and management, from triage and prioritization to driving remediation and learning across teams. • You can demonstrate experience with threat modeling using frameworks like STRIDE, and you naturally use these techniques to spark better design discussions. • You can demonstrate hands-on experience with coding, “vibe‑coding,” and scripting (for example, Python, Bash), and you enjoy building small tools and experiments that make security work faster and smarter. • Familiarity with Azure, GCP, and Google Workspace is a plus and so is a desire to keep learning new platforms and ecosystems as Sonar evolves. • Additional comments • This role is based in Geneva, Switerzland. We are unable to consider candidates unwilling to be in Geneva, but we are willing to relocate the right candidate.
Responsibilities
• Security Strategy: Support the development of strategic security goals and maintain their alignment with the company mission and priorities. • Secure by design: Closely collaborate with product engineering teams to co‑create secure, resilient solutions, bringing security considerations into the earliest stages of design. • Secure by design: Review product architectures and cloud solutions with a critical and curious eye, ensuring security requirements are not only integrated but actively shape the final design. • Offensive security: Drive internal and external security reviews, penetration tests, and red‑team exercises that challenge assumptions and reveal real‑world attack paths, periodically. • Offensive security: Lead the selection, coordination, and oversight of external pen testing services and security certifications, transforming their findings into meaningful improvements. • Projects and initiatives: Drive high‑impact security initiatives from the strategic security plan — from evaluating new approaches to rolling out cutting‑edge tools and capabilities across the organization. • Customer trust: Investigate and manage customer security concerns with empathy and rigor, turning challenging questions into opportunities to deepen trust. • Resolve security issues: Dive into complex security findings in products and internal systems, investigate root causes, and guide teams to robust, sustainable remediation. • Security incidents: Act as a security subject matter expert during security incidents, helping teams to quickly understand, contain, and learn from emerging threats.
Benefits
• Flexible comprehensive employee benefit package. • We encourage usage of our robust time-off allocations. You will receive 23 days of PTO per calendar year (on a pro-rated basis depending on your employment start date), with additional time provided for sickness, life events and holidays. • We offer an exciting 401(k) plan that has a 4% match, fully vested on day one of participation. • Generous discretionary Company Growth Bonus, paid annually. • Fully paid parking in the heart of downtown Austin, Texas. • Global workforce with employees in 20+ countries representing 35+ unique nationalities. • We have an annual kick-off somewhere in the world where we meet to build relationships and goals for the company. • Monthly catered events, and team events. • We value diversity, equity, and inclusion
No credit card. Takes 10 seconds.