Back to all jobs

Senior DevSecOps / Security Engineer – Application & Cloud (Ecommerce)
ThorneWorldwide$150k–180kRemote1mo ago
- Employment
- Full-time
- Seniority
- Senior
About the role
RESPONSIBILITIES
WHAT YOU NEED
- Injection (SQL/NoSQL), XSS, CSRF
- Broken authentication / session management
- Business logic flaws (checkout, pricing, promotions, abuse scenarios)
- Account takeover, credential stuffing, bot attacks
- SAST (Java-focused), DAST, SCA (dependencies), secrets scanning
- IAM roles and least privilege access
- Network segmentation (VPCs, security groups, private/public boundaries)
- Secrets management (AWS Secrets Manager, Parameter Store)
- Data protection (encryption at rest/in transit)
- Web/app-layer attacks
- API abuse
- Pen tests
- Purple team exercises
- Assumed breach scenarios
WHAT WE OFFER
- Competitive compensation
- 100% company-paid medical, dental, and vision insurance coverage for employees
- Company-paid short- and long-term disability insurance
- Company- paid life insurance
- 401k plan with employer matching contributions up to 4%
- Gym membership reimbursement
- Monthly allowance of Thorne supplements
- Paid time off, volunteer time off and holiday leave
- Training, professional development, and career growth opportunities
Perks & benefits
- 401k
- Vision Insurance
- Paid Time Off
- Pension Matching
- Free Gym Membership
741,000+ hidden jobs like this
Thorne and thousands of companies post here first — often days before LinkedIn or Indeed. Your first 5 applications are free; go Pro to apply without limits.
Everything Pro unlocks:
- Unlimited applications — free stops at 5
- Track every application in one place
- Apply straight to the source, one click
- Save & organize roles you love
- Roles pulled from company boards before the big sites