Security Engineer • Staff

Who you are

You have a strong background in offensive security with experience in penetration testing across various environments, including web applications, APIs, and cloud infrastructure. Your expertise in tools like Burp Suite and Metasploit allows you to identify and exploit security vulnerabilities effectively. You are comfortable working in cloud-native environments, particularly with Kubernetes and AWS, and have a solid understanding of CI/CD pipelines and internal tooling.

You possess excellent collaboration skills, enabling you to work closely with engineering teams to validate findings and prioritize remediation efforts. Your ability to document security vulnerabilities clearly and design internal processes for continuous security improvement sets you apart. You are passionate about embedding security into the engineering culture and have a proactive approach to identifying and mitigating risks.

What you'll do

As Kong's first dedicated Penetration Tester, you will lead the charge in establishing offensive security practices within the organization. You will perform comprehensive penetration testing across various platforms, including web applications, APIs, and microservices, ensuring that security is a priority in all development processes. Your role will involve identifying, exploiting, and documenting security vulnerabilities, as well as working closely with engineering teams to validate findings and support remediation efforts.

You will also be responsible for designing and improving internal processes for continuous security, ensuring that security testing practices are scalable and repeatable. Your influence will help shape how security is integrated into Kong's engineering culture, making a significant impact on the overall security posture of the organization.

What we offer

Kong provides a dynamic work environment where you can make a real difference in the security landscape of our products and services. You will have the opportunity to work with cutting-edge technologies and collaborate with talented professionals across various teams. We encourage you to apply even if your experience doesn't match every requirement, as we value diverse perspectives and backgrounds.