Security Engineer, Application Security

Skills

About the Role

You will identify and mitigate security vulnerabilities in software applications by building security tools, performing code reviews, penetration testing and security assessments. You will work closely with development teams to embed secure coding practices throughout the SDLC, and provide security guidance to developers and stakeholders. The role is preferred to be based in San Francisco, Seattle or New York City, with a hybrid model of 3 days in the office per week, though remote work may be considered.

Requirements

• Extensive experience in information security or cybersecurity, with significant leadership or management experience
• Deep understanding of security technologies, tools and best practices including secure coding, threat modeling, risk assessment and incident response
• Experience in application security and software development
• Proficiency in programming languages such as Python, Java, C++
• Knowledge of security tools such as Burp Suite and OWASP ZAP
• Familiarity with security protocols and encryption methods
• Strong written and verbal communication skills

Responsibilities

• Conduct security assessments, code reviews and penetration testing
• Design, develop and implement security tools, frameworks and methodologies
• Collaborate with development teams to integrate security best practices into the SDLC
• Conduct threat modeling and risk assessments
• Track, analyze and manage vulnerabilities and support remediation
• Assist in investigating and responding to application security incidents
• Stay current on security threats, vulnerabilities and technologies

Benefits

• Equity
• Performance-related bonus
• Medical, dental and vision insurance with employer HSA contributions
• Pre-tax Health FSA, Dependent Care FSA and commuter accounts
• 401(k) with employer match
• Paid parental leave (up to 24 weeks birth parents, 20 weeks non-birthing parents)
• Paid medical and caregiver leave (up to 8 weeks)
• Flexible PTO for exempt employees; up to 15 days for non-exempt
• 13+ paid company holidays and company office closures
• Paid sick and safe time
• Mental health and wellness support
• Employer-paid basic life and disability coverage
• Annual learning and development stipend
• Daily meals in offices and meal delivery credits
• Relocation support
• Charitable donation matching and wellness stipends