Senior Security Engineer (Application Security)

Job description preview

From Encord’s original posting

ABOUT US Encord is the universal data layer for AI that helps 300+ AI teams train and run models on the right data. Our platform indexes, curates, annotates, and evaluates data across the full AI lifecycle, from development through production. Trusted by Woven by Toyota, AXA, UiPath, Zipline, and more. We're an ambitious team of 100+ working at the frontier of AI and have raised $60M in Series C funding from Wellington Management, CRV, Next47 and Y Combinator. About the role As Lead Security Engineer, you'll own application security across our platform, embedding secure practices into how we design, build, and ship software, and setting the direction for a growing security function. What you'll do - Own the application security program end to end: threat modelling, secure design reviews, code review, and vulnerability management. - Build security into the SDLC with SAST, DAST, dependency/SCA, and secrets scanning integrated into CI/CD without slowing teams down. - Partner with engineering on authentication, authorization, multi-tenancy isolation, and data protection across our APIs and SDKs. - Lead penetration testing, bug bounty triage, and incident response for application-layer…