Security Engineer, Application Security

Skills

About the Role

You will identify and mitigate vulnerabilities in applications by building security tools, performing code reviews, penetration testing and security assessments. You will work with development teams to integrate secure coding throughout the SDLC, perform threat modeling, manage vulnerabilities, support incident response and advise stakeholders.

Requirements

• Extensive experience in information security or cybersecurity
• Understanding of secure coding, threat modeling, risk assessment and incident response
• Experience in application security or software development
• Proficiency in programming languages such as Python, Java, C++
• Knowledge of security tools such as Burp Suite and OWASP ZAP
• Strong written and verbal communication skills

Responsibilities

• Conduct security assessments, code reviews and penetration testing
• Design and implement security tools, frameworks and methodologies
• Collaborate with development teams on secure SDLC practices
• Conduct threat modeling and risk assessments
• Track, analyze and manage vulnerabilities
• Support incident response
• Stay current on security trends

Benefits

• Equity
• Performance-related bonus
• Medical, dental and vision insurance
• Health Savings Account employer contributions
• Health FSA, Dependent Care FSA and commuter pre-tax accounts
• 401(k) with employer match
• Paid parental leave
• Paid medical and caregiver leave
• Flexible PTO
• 13+ paid company holidays and company office closures
• Paid sick and safe time
• Mental health and wellness support
• Employer-paid basic life and disability coverage
• Annual learning and development stipend
• Daily meals in offices and meal delivery credits
• Relocation support
• Charitable donation matching and wellness stipends