Intellibee is seeking a Security Engineer in San Jose, CA to support the Search Engineering team across vulnerability lifecycle management, secure architectural practices, and automated fix validation. The work blends security analysis with hands-on coding, including building test harnesses to verify findings and shepherding validated patches toward production.

This role focuses on turning scanner output into actionable, policy-aligned security outcomes while ensuring changes are safe, testable, and review-ready.

Responsibilities

Document trust boundaries, data flows, and architectural entry points for high-priority services.
Keep threat profiles current in centralized repositories.
Review and filter scanner results, then classify severity and evaluate exception requests against security policies.
Create minimal test environments or harnesses to validate reported findings and confirm whether vulnerabilities are real or false positives.
Supervise and validate code patches produced by automated remediation agents by executing tests and inspecting diffs for regressions.
Route validated patches to code owners and guide fixes through code review to production deployment.

Requirements

Knowledge of architectural trust boundaries, attack surfaces, data flows, and threat modeling frameworks such as STRIDE and PASTA.
Working familiarity with vulnerability classifications including CWE, CVE, and OWASP Top 10, plus an understanding of SLA mapping.
Ability to read and write code in at least two core languages: C++, Go, Java, or Python, and build test harnesses or proof-of-concepts.
Strong code review skills, including identifying regressions and hallucinations, along with knowledge of secure coding standards.

Technologies

STRIDE
PASTA
CWE
CVE
OWASP Top 10
C++, Go, Java, Python

Location and Interview Process

San Jose, CA (5 days onsite from day 1)
Second interview will be in-person in San Jose, CA.

Experience Focus

50% Security + 50% Coding Experience

Nice-to-Have / Advanced Skills

Experience conducting threat model reviews for large distributed or microservices architectures.
Experience managing vulnerability queues, automated scanning tools, and compliance exception reviews.
Practical experience with fuzzing, unit test frameworks, sandbox execution, and cross-boundary debugging.
Experience with prompt-tuning automated code generation tools, differential testing, and patch validation.

Security Engineer