Staff Application Security & Cryptography Engineer at SentinelZero
SentinelZero Security✓ Verified Company
Job Description
SentinelZero builds hardware-backed identity and short-lived certificate authorities for cloud engineering teams. We are looking for a Staff Application Security Engineer to lead threat modeling, cryptographic protocol audits, and runtime sandboxing.
Security Engineering Charter You will review and co-author Go and Node.js authentication microservices implementing WebAuthn/FIDO2 passkeys, mTLS workload identity (SPIFFE/SPIRE), and KMS envelope encryption. You will also maintain our continuous fuzzing harnesses and triage external bug bounty submissions.
Background Needed Seven+ years in application security engineering, secure software development, or offensive penetration testing. Fluency reading and patching Go, TypeScript/Node.js, and Kubernetes admission controllers. Deep knowledge of OIDC, SAML, PKI certificate lifecycles, and AWS IAM privilege boundaries.