Juniper Square
Juniper Square
201 – 500 Angajați
FinanțeImobiliareSaaS
Juniper Square dezvoltă software și servicii pentru parteneriate de investiții private, ajutând partenerii generali și partenerii limitați să rămână conectați pe tot parcursul ciclului de viață al investiției. Platforma sa deservește firme din domeniul imobiliar comercial, al capitalului privat și al capitalului de risc, reunind administrarea fondurilor, atragerea de capital, gestionarea investitorilor, conformitatea și raportarea. Instrumentele companiei sprijină o comunicare mai clară cu investitorii, o guvernanță mai solidă a datelor și o experiență de investiții mai transparentă.

Senior Application and Platform Security Engineer

Protect Juniper Square’s private markets platform across its applications, cloud infrastructure, and AI features. Build vulnerability defenses, security automation, and safeguards that help teams ship secure software.

Descriere

  • Find and remediate vulnerabilities in applications and cloud infrastructure
  • Create security guardrails, automated checks, and safe defaults
  • Guide security design reviews and threat modeling for upcoming product features
  • Review code manually and test web applications and APIs for security issues
  • Detect authorization and business logic weaknesses, then verify that fixes work
  • Develop secure-by-default libraries, framework controls, and custom static analysis rules
  • Assess findings from automated and manual tests and outside security reviews
  • Provide practical remediation advice focused on underlying causes
  • Assess AI features for prompt injection, unsafe tool use, data exposure, and excessive autonomy
  • Share design review and finding triage duties with the team
  • Coordinate external penetration tests from initial scope through retesting
  • Work with partners on build pipeline and software supply chain security, especially dependency risks
  • Help respond to application security incidents
  • Create security automation and agents to speed up reviews and triage

Cerințe

  • At least five years in application or product security, or software engineering with a strong security focus
  • Extensive experience uncovering vulnerabilities through manual code review
  • Strong Python skills and working knowledge of JavaScript or TypeScript
  • Ability to write production-quality code
  • In-depth knowledge of OAuth 2.0/OIDC, SAML, MFA, session management, and access control models
  • Practical experience implementing identity and access controls securely
  • Experience leading threat modeling sessions and translating findings into concrete requirements
  • Experience operating and tuning SAST, SCA, and DAST tools, including creating custom rules
  • Working knowledge of cloud, container, and CI/CD security
  • Understanding of risks in applications powered by large language models
  • Clear written communication and the ability to influence engineering teams without slowing them down
  • Certifications such as OSWE or BSCP are a plus but not required
  • Experience creating security tools or libraries for developers
  • Experience establishing or running a security champions program
  • Familiarity with OWASP ASVS or the OWASP Top 10 for LLM Applications

Beneficii

  • Option to work fully remotely
  • Flexible option to work from the Mumbai and Bangalore offices some or all of the time
  • Digital-first operations
  • Collaboration across 27 U.S. states, two Canadian provinces, India, Luxembourg, and England

Locuri de muncă similare

Mirantis

Senior Rust Software Engineer at Mirantis (Remote, Europe)

Mirantis

Build Kubernetes control planes for Mirantis’ cloud-native AI infrastructure. Develop networking, DPU, and bare-metal orchestration systems for demanding workloads.

Deschide
SEB

Mid to Senior Java Developer, Investment Advisory

SEB

Build robo-advisory and other digital investment products for SEB, integrating with a private banking platform. Work across the stack in a full-stack role focused primarily on back-end development.

Deschide
Honeywell

Senior Advanced Software Engineer, Honeywell (Hybrid, Poland)

Honeywell

Build cloud-native services for Honeywell Building Automation, designing secure APIs and modernizing legacy systems. Work in Gdańsk, Poland, and mentor developers while collaborating across engineering teams.

Deschide
SEB

Mid-to-Senior Java Software Developer

SEB

Build full-stack digital investment services at SEB, with a primary focus on back-end development. Work on robo-advisory, micro-investment, and private banking platform capabilities.

Deschide