Senior Security Engineer, Applications at Postman

The Senior Security Engineer will mentor junior Security Engineers and Security Champions on security best practices and techniques. They will improve security tooling and processes, conduct security talks and training sessions, and identify critical flaws and weaknesses in web applications, services, and cloud infrastructure, then design and implement strategic solutions to remediate them. Responsibilities also include writing and reviewing technical proposals, architectural diagrams, application code, and IaC, and using automated and manual testing techniques to understand the environment and reduce false negatives. The role involves reducing manual security review efforts by improving tooling and processes, enhancing the scope of assessments by adding new techniques and vulnerability categories, and consolidating and tracking vulnerabilities across the organization and supply chain. Additionally, they will review and define requirements for developing and deploying secure products, create guidelines and standards to meet these requirements, and work closely with the team to build systems that protect against and eradicate entire classes of vulnerabilities.