The Role

At Gigs, customers trust us with the systems that power their telecom products and the data of their end users. Earning and keeping that trust is the job of the Gigs Security team.

We're looking for a Senior Security Engineer to design and run systems and processes that allow our teams to design, build, ship and maintain our products securely. This is the first dedicated Product Security role at Gigs. You'll be joining the Security team as the third team member. You will work on day-to-day operational load, build the systems and automations to reduce that load, and strongly influence our strategic direction.

Salary range:

• EU: €100,000 - 130,000
• UK: £100,000 - 130,000

(The final offer depends on your background, skills, and how you perform through the process. We're open to considering outlier candidates, which may result in an adjustment to the scope and compensation)

What You Will Do

• Build the secure paved roads like SAST, DAST, secrets scanning, dependency hygiene, secure-by-default templates, libraries and everything else that helps our team to move fast and secure
• Threat model and review designs with product and engineering teams, feeding the results into the paved roads that make the next launch more secure-by-default
• Own the product security vendor program: AppSec tooling, pentest vendors, bug bounty platform - from selection through onboarding to operation and renewal
• Co-own vulnerability response and bug bounty triage with the rest of the Security team

What We Are Looking For

• Experience at a high-growth startup or scaleup (50-500 employees)
• Proven excellence in Product Security and/or Application Security
• Production software engineering experience: read, review and write code across our stack (Ruby, JavaScript/TypeScript, Go)
• Experience with:
  • Cloud security (GCP/AWS, IAM, VPC, Secret(s) Manager, Cloud Run/GKE/Fargate, Security Command Center/Security Hub) and familiarity with Terraform
  • AppSec tooling: SAST, SCA, secret scanning, and supply-chain tooling
  • Threat modeling with engineering teams
  • Procuring and managing security vendors (pentest firms, bug bounty platforms)
• AI-assisted security proficiency: use AI effectively and responsibly in your day-to-day work and for building systems
• Strong communication skills and the ability to influence engineers instead of just gatekeeping
• Ability to work independently and prioritize in a fast-paced environment