Technical Security Expert at Spendesk

As a Technical Security Expert, you will support developers by collaborating closely with development and infrastructure teams, discussing best practices, and promoting a security-by-design culture in projects. You will conduct in-depth code reviews to identify and fix security vulnerabilities in TypeScript code, perform dependency audits via reverse engineering, and execute infrastructure audits on Infrastructure-as-Code (IaC) Terraform within a multi-tenant AWS platform. Additionally, you will conduct tool audits, oversee SIEM management, plan and execute penetration tests, contribute to updating security policies, supervise their implementation, and stay up to date on emerging threats, vulnerabilities, and attack techniques, recommending appropriate defense strategies. Furthermore, you will develop scripts and tools to automate security tasks, including incident detection and response, and train and raise awareness among internal teams about security challenges, secure coding practices, and security tool usage.