Senior Application Security Engineer

View full description

Requirements:

• 5+ years experience in a product security focused role.
• Experience with product security at a multi-tenant SaaS company preferred.
• Experience with vulnerability management.
• Deep understanding of web application and mobile application security risks.
• Deep understanding of Linux, Networking, Cryptography, and Cloud Architecture fundamentals.
• Software development experience with Node.JS or other frameworks like React, Angular, etc. is preferred.
• Familiarity with MongoDB, Node.JS, Ruby, and/or Python is preferred.
• Excellent command of English, both written and verbal.

Responsibilities:

• Performing security reviews of Mural product features and architecture.
• Manage and operate our bug bounty program.
• Lead penetration testing and manage any risks to remediation.
• Implementation and operation of SAST and DAST technologies in the CI workflow.
• Working closely with Engineering teams to track and manage product risks to remediation.
• Working closely with Engineering to increase coverage of security testing.
• Communicating and nurturing relationships with security researchers, customers, and other stakeholders.
• Producing metrics to help track the health of our product vulnerability management strategy.
• Educating and evangelizing secure coding best practices.