Senior Application Security Engineer
- Hiring Organisation
- Cloudsmith
- Location
- Belfast, UK
- Employment Type
- Full-time
vulnerability research experience against real applications, APIs, cloud-native systems, and distributed services. Strong cloud-native security experience, especially across AWS, IAM, KMS, S3, containers, Terraform, CI/CD, secrets handling, logging, and multi-tenant isolation. Sound judgment on vulnerability priority. You understand CVSS, but you care … engines, OPA/Rego, eBPF, or similar control points. Contributions to open-source security tooling or supply chain security projects. Familiarity with Datadog, AWS Security Hub, Okta, GitHub Advanced Security, Snyk, Semgrep, Trivy, Wiz, or similar tooling. Useful, but not required: certs such as OSCP, CSSLP, GPEN, GWAPT ...