Security Engineer (Vulnerability Triage & Automated Patch QA)

job summary:

We are seeking a proactive Security Engineer to join an operational security team acting as the bridge between automated scanning systems and product development teams. In this role, you will streamline threat modeling, reproduce and validate reported vulnerabilities, QA automated code patches, and ensure fixes are safely deployed into production.

location: San Francisco, California

job type: Contract

salary: $57 - 67 per hour

work hours: 8am to 5pm

education: Bachelors

responsibilities:

• Map trust boundaries, data flows, and architectural entry points to maintain standardized threat profiles.
• Triage findings from automated static and endpoint security scanners, classifying severity and managing exceptions.
• Build minimal reproduction harnesses and test environments to confirm exploitability and eliminate false positives.
• Review, test, and QA automated code patches generated by AI/agentic remediation engines, preventing regressions and ensuring compliance with secure coding standards.

qualifications:

Proficiency in reading and writing code in at least two core languages (C++, Go, Java, or Python).

Strong working knowledge of vulnerability classifications (CWE, CVE, OWASP Top 10) and scanner workflows.

Demonstrated experience constructing local test harnesses and performing code-level vulnerability reproduction.

Proven experience in secure code review, patch testing, and software QA.

PREFERRED QUALIFICATIONS

Experience with threat modeling frameworks such as STRIDE or PASTA in microservice architectures.

Hands-on experience with automated code generation or AI remediation tools.

Exposure to fuzzing frameworks and sandbox execution.

skills:

C++,code generation,code reviews,data flows,input validation,fuzz testing,Go,unit and integration tests,Java,OWASP Top 10,Python,secure coding standards,Debugging,scanning tools,unit test,attention to detail,Automated,operational security,Policy Management,QA,Security,system designs,threat modeling,threat model,Triage,Vulnerability

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact


Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.

Qualified applicants in San Francisco with criminal histories will be considered for employment in accordance with the San Francisco Fair Chance Ordinance.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

We will consider for employment all qualified Applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance.