The ad says“Extensive experience conducting application security assessments, including code review and evaluation of authentication and authorization designs”
The ad says“Extensive experience conducting application security assessments, including code review and evaluation of authentication and authorization designs”
The ad says“Extensive experience with application and cloud architectures, predominantly AWS, and a strong interest in how modern cloud patterns can strengthen or weaken security”
The ad says“Experience with penetration testing, red-team engagements, and bug-bounty programs, with an attacker mindset focused on protecting what matters most”
The ad says“Extensive experience conducting application security assessments, including code review and evaluation of authentication and authorization designs”
The ad says“Experience with penetration testing, red-team engagements, and bug-bounty programs, with an attacker mindset focused on protecting what matters most”
The ad says“Experience with penetration testing, red-team engagements, and bug-bounty programs, with an attacker mindset focused on protecting what matters most”
The ad says“Experience applying threat-modeling approaches, such as STRIDE, to improve design discussions and identify risks early”
Values
The ad says“Experience assessing and securing AI and agentic AI capabilities, with the curiosity to experiment, learn, and help define emerging best practices”
The ad says“Practical experience using AI to automate repeatable security work, along with enthusiasm for building small tools and experiments that make security teams faster and more effective”
The ad says“Familiarity with Azure, GCP, and Google Workspace is a plus, as is the appetite to learn new platforms and ecosystems as Sonar evolves”
The ad says“Familiarity with Azure, GCP, and Google Workspace is a plus, as is the appetite to learn new platforms and ecosystems as Sonar evolves”
The ad says“Familiarity with Azure, GCP, and Google Workspace is a plus, as is the appetite to learn new platforms and ecosystems as Sonar evolves”
The primary goal of the Information Security team is to earn deep trust with our rapidly growing customer base by relentlessly safeguarding Sonar products and the supporting cloud platforms, while consistently demonstrating that Sonar meets demanding, industry‑leading security standards
You will champion security by design, partnering with product, platform, and infrastructure engineering teams so that our products and cloud platforms are imagined, built, and operated to Sonar’s high security bar
Shape secure products and cloud architecture
Partner with product and engineering teams from the earliest design stages to build secure, resilient solutions by design
Review product architectures and AWS environments, ensuring security requirements meaningfully inform technical decisions and final designs
Lead security assurance and improvement
Deliver high-impact initiatives from the strategic security plan, from evaluating new approaches to deploying modern security tools and capabilities across the organization
Plan and manage independent security assessments, penetration tests, and red-team exercises; translate findings into practical improvements and customer-facing trust artifacts
Investigate complex product and internal security findings, identify root causes, and help teams implement durable remediation
Strengthen customer trust and incident readiness
Lead the investigation and resolution of customer security concerns with rigor and empathy, using each engagement to reinforce confidence in our security program
Serve as a security subject-matter expert during incidents, helping teams understand, contain, and learn from emerging threats. Occasional on-call participation may be required
Anticipate threats and scale the security program
Monitor and interpret threat intelligence, turning changes in the threat landscape into prioritized risks and actionable recommendations
Continuously improve and automate security processes, increasing the quality, speed, and visibility of information that informs the security strategy
Benefits
401K Plan: Sonar US matches up to 4% of gross salary
90% healthcare premium coverage for employees, 60% for dependents
EAP (Employee Assistance Program) Health Savings Accounts (HSA, FSA, DCFSA). Supplemental coverage is offered by EE’s expense
Life and disability insurances fully paid by Sonar. Sonar covers 100% of Telemedicine for FTE whom are covered by Sonar medical
Hospital Indemnity, Accident, Critical Illness
Pet Insurance
Time Off: 25 PTO days plus additional days based on seniority and circumstances
Commuting: Public transport reimbursement of 60% for annual subscription
Free parking space
Pension: Sonar UK contributes 50% of the total costs, which amounts to 5% of your gross salary for saving. Employees contribute the other 5%
Flexibility to work from home 2 days a week on Wednesdays and Fridays
Health Insurance: Sonar covers 100% of the employee premiums for medical, dental, and EAP (Employee Assistance Program) plans through BUPA
Time Off: 28 PTO days, plus additional days based on seniority and circumstances
Commuting: we will reimburse 60% towards the cost of an annual public transport pass
Preferred experience
Experience applying threat-modeling approaches, such as STRIDE, to improve design discussions and identify risks early
Practical experience using AI to automate repeatable security work, along with enthusiasm for building small tools and experiments that make security teams faster and more effective
Experience assessing and securing AI and agentic AI capabilities, with the curiosity to experiment, learn, and help define emerging best practices
Extensive experience conducting application security assessments, including code review and evaluation of authentication and authorization designs
Experience with penetration testing, red-team engagements, and bug-bounty programs, with an attacker mindset focused on protecting what matters most
Threat awareness and security automation
Security assurance and remediation
Secure product and cloud architecture
Extensive experience with application and cloud architectures, predominantly AWS, and a strong interest in how modern cloud patterns can strengthen or weaken security
Experience investigating and managing vulnerabilities, from triage and prioritization through to remediation and organizational learning
Familiarity with Azure, GCP, and Google Workspace is a plus, as is the appetite to learn new platforms and ecosystems as Sonar evolves
