As a Senior Security Engineer at Smartstream, you will join our Security Engineering Centre of Excellence and serve as a senior technical member across the entire Security Engineering function. You'll be the escalation point for embedded Security Engineers and Security Champions on the most complex problems - novel vulnerability classes, adversarial-AI scenarios, LLM-driven code-scan findings, and regulator-mandated threat-led penetration tests.
This is a hands-on, deeply technical individual-contributor role. You will write code, build tooling, perform tool integrations, run scans across a large enterprise codebase, mentor peers, and help shape how Smartstream uses AI inside the Secure SDLC.
You will work upstream of the VulnOps function, which owns the unified vulnerability backlog and remediation pipeline. Your focus is on original analysis, novel vulnerability classes, adversarial AI, complex penetration testing, variant analysis, and technical mentoring - findings you produce or validate flow into the VulnOps backlog for tracked closure under SLA.
Requirements
LLM-based code scanning. Own and operate LLM-assisted code scanning across the Smartstream product portfolio. Tune prompts and pipelines, triage false positives, validate and demonstrate exploitability of findings where necessary, and drive remediation through the VulnOps backlog in partnership with engineering teams
SAST/DAST escalation support. Act as the technical authority for embedded Security Engineers and developers on hard SAST and DAST findings, exploitability assessment, fix design, false-positives elimination, and pattern publication
Adversarial AI & blue team. Run the in-house adversarial-AI simulation platform and blue-team activities. Manage outsourced red-team engagements and route findings into the VulnOps backlog
DORA TLPT technical lead. Provide the technical lead during DORA Article 26 threat-led penetration tests when financial-institution customers pull Smartstream into scope
Vari