Senior Security Engineer

We're growing our security team and looking for a Senior Security Engineer to help own how well our product finds real vulnerabilities — and to prove it. You'll shape the security testing strategy, build the benchmark corpus that measures detection quality, and stay hands-on: writing seeded vulnerability test cases, triaging findings, and reproducing detection failures across the languages we support.Key ResponsibilitiesOwn the end-to-end security capability roadmap — vulnerability classes, detection methods, and verification techniques — and continuously review the commercial and open-source security tooling landscape to keep our approach current.Select and embed the security testing frameworks and methodologies the product aligns to, tracking emerging attack classes and testing techniques and deciding when and how to incorporate them.Own the product's security thesis and represent it externally to stakeholders, customers, and the wider community, while setting the security requirements for the harness itself.Own detection quality across all specialist analysis lenses, ensuring consistency and reliability of results.Design and curate the benchmark corpus — a structured set of seeded and labeled vulnerabilities used to validate detection performance — and own the measurement methodology that safeguards the integrity of all published detection figures.Adjudicate whether findings are genuine, setting and maintaining the triage standard used across the team.Run the standing evaluation program benchmarking competing tools and techniques against the corpus.Review external contributions and harness changes for security impact before they're merged.Build and maintain seeded vulnerability test cases across all supported programming languages, and grow the regression corpus from validated findings.Run benchmark passes with every release and record results against the established baseline.Perform scanning and first-pass triage of findings, escalating ambiguous or unclear cases for senior review, and reproduce reported detection failures with a minimal, reproducible test case.Maintain vulnerability classification mappings and per-language coverage tables, and handle first-line community reports of false positives and missed detections.Requirements:Hands-on background finding and validating real vulnerabilities across multiple programming languages — vulnerability research, application security, or detection engineering experience.Education: Bachelor’s degree in Data Science, Computer Science, Data Analytics, or a related technical field.Experience designing or maintaining structured, labeled test corpora used to measure a security tool's detection performance.Working knowledge of automated vulnerability detection techniques (e.g. SAST, DAST, SCA) and their common failure modes — false positives and false negatives.Demonstrated ability to triage and adjudicate ambiguous security findings, and to reproduce detection failures as minimal, documented test cases.Active awareness of the commercial and open-source security tooling landscape and emerging attack and testing techniques.Preferred: experience representing a security product or point of view externally (talks, writing, community engagement); experience reviewing code or harness changes for security impact; prior work at a security product vendor, in a security research team, or on a red team.We offer:Opportunity to work on cutting-edge projectsWork with a highly motivated and dedicated teamCompetitive salaryFlexible scheduleBenefits package - medical insurance, vision, dental, etc.Corporate social eventsProfessional development opportunitiesWell-equipped officeAbout us:Grid Dynamics (NASDAQ: GDYN) is a leading provider of technology consulting, platform and product engineering, AI, and advanced analytics services. Fusing technical vision with business acumen, we solve the most pressing technical challenges and enable positive business outcomes for enterprise companies undergoing business transformation. A key differentiator for Grid Dynamics is our 8 years of experience and leadership in enterprise AI, supported by profound expertise and ongoing investment in data, analytics, cloud & DevOps, application modernization and customer experience. Founded in 2006, Grid Dynamics is headquartered in Silicon Valley with offices across the Americas, Europe, and India.