Jobs at Astra Security

Perform web, mobile, cloud, SaaS, network, and open-source penetration tests; manage engagements through Astra’s platform; identify vulnerabilities, including business logic flaws; contribute intelligence to a DAST scanner; communicate remediation guidance to clients; and maintain the vulnerability management system.

Perform manual and automated testing for SaaS applications, including Symfony APIs, Next.js dashboards, and FastAPI scanners. Develop functional, integration, and end-to-end test suites using Playwright; validate REST APIs; create test plans; manage test environments; track bugs; integrate tests into CI/CD pipelines; and collaborate with engineering, DevOps, scanner, and product teams to improve release quality.

Leads cross-functional cybersecurity platform initiatives from inception through general availability, coordinating engineering, scanner, QA, product, and leadership teams. Shapes technical scope and trade-offs using business analytics and hands-on coding expertise. Responsibilities include architecture, project planning, risk mitigation, production operations, SLA definition, SDLC improvement, stakeholder communication, and occasional engineering management. The role focuses on API security, autonomous AI pentesting, vulnerability scanners, and scalable web, mobile, cloud, and API application security.

Onboard and educate customers on Astra’s cybersecurity platform, drive product adoption and engagement, manage relationships and stakeholder communication, respond to customer inquiries, coordinate cross-functional delivery, maintain customer records, support renewals, and identify upselling and cross-selling opportunities. Success is measured through customer satisfaction, loyalty, adoption, retention, and net revenue retention metrics.

Conduct vulnerability assessments and penetration tests across web and mobile applications, cloud infrastructure, SaaS applications, network devices, and open-source projects. Develop and test DAST scanner rules, communicate with clients about remediation, guide vulnerability fixes, and maintain the vulnerability management system.

Build and maintain cloud infrastructure, containerized environments, infrastructure-as-code automation, CI/CD pipelines, observability systems, and reliability practices across GCP and AWS. The role develops Python and Bash tooling, configures Kubernetes and Istio, implements secure deployment strategies, supports incident response, and collaborates with engineering teams to improve scalability, performance, and delivery velocity.