TheSoul Group is a leading creator business platform positioned at the heart of the creator economy. Our original videos, animations, and editorial stories inspire audiences in 21 languages, across 60 platforms and 20 websites. Together with our network of 15,000 talented creators, we reach over 5 billion followers and generate more than 100 billion monthly views on social media. As a global powerhouse in digital media, we drive viral success for creators and brands worldwide through a wide range of services, leveraging our expertise in content distribution, localization, and social media management. We’re the creators behind global phenomena such as 5-Minute Crafts and BrightSide, and we continue to expand our influence in the creator economy through strategic acquisitions like Mediacube and Underscore Talent. We’re a dynamic, remote-first global team, fostering award-winning creativity, a no-red-tape approach, and great vibes! Don’t see a role that fits you right now? Let’s still talk. At TheSoul Group, we’re constantly evolving with new projects, challenges, and roles. Sometimes the right people come along before the right job title does. If you’re excited about what we’re building and believe your skills could add real value, we’d love to hear from you, even if there isn’t a perfect opening today. This could be a great fit if you: - Have experience in areas relevant to our work (engineering, product, design, marketing, operations, or related fields). - Feel aligned with our mission and way of working. - Are curious, proactive, and open to growing with us. What happens next: - We’ll review your application and see if there’s a current opportunity that makes sense. - If not, we can just keep your profile in mind and let you know when a relevant role opens. - You’ll hear back from us either way.

• Conduct security assessments using SAST, DAST, and SCA tools to identify vulnerabilities in applications • Perform code reviews and provide secure coding guidance to development teams • Implement and maintain GitHub Advanced Security, including secret scanning and code scanning • Assess and improve security of Infrastructure as Code (IaC) deployments using Terraform • Evaluate container security in our Docker and Kubernetes environments • Support CI/CD security integration and automation • Conduct penetration testing and red team/purple team exercises on applications • Review and secure API implementations, with focus on GraphQL security • Evaluate AI/ML model security and implement protections against prompt injection and other AI-specific threats • Collaborate with the Staff AppSec Engineer on CIAM and advanced AI security initiatives • Maintain security documentation and contribute to security awareness training

• Collaborate with the Webflow engineering team to secure Webflow’s web application platform and ecosystem. • Bring security best practices to the software development lifecycle. • Champion security standards while balancing business strategies and requirements. • Support Webflow’s security compliance frameworks • Find security vulnerabilities through grey-box techniques • Propose solutions at the architecture and code level. • Contribute code and architecture improvements to enable security within Webflow’s application. • Cross-train entry and mid-level application security engineers.

• Own the long-term technical direction for application security across Thumbtack • Lead large, cross-functional security initiatives from problem definition through delivery • Design secure architectures and implement shared security tooling • Partner with teams to prioritize security investments based on risk and impact • Mentor engineers and drive organization-wide improvements in application security