Staff Application Security Engineer

View full description

Requirements:

• 7+ years of experience in application security, including 2+ years of software development focused on security.
• Expertise in secure software design, secure coding, and web application security, with a strong commitment to risk reduction and sustainable security practices.
• Experience with Threat Modeling, penetration testing, and identifying high-complexity application vulnerabilities.
• Experience with software supply chain security and led bug bounty programs and security tooling initiatives.
• Successfully implemented and improved secure development lifecycle (SDLC) processes, including planning, communication, and automation.
• Led and delivered multi-quarter, complex security projects, application security roadmaps, and medium to large security programs in collaboration with engineering teams.
• Experience mentoring other application security engineers and fostering security best practices across organizations.

Responsibilities:

• Collaborate with the Webflow engineering team to secure Webflow’s web application platform and ecosystem.
• Bring security best practices to the software development lifecycle.
• Work as part of a team to champion security standards while balancing business strategies and requirements.
• Support Webflow’s security current and future compliance frameworks
• Work to find security vulnerabilities through grey-box techniques, and propose solutions at the architecture and code level to mitigate findings.
• Contribute code and architecture improvements to enable security within Webflow’s application for engineers.
• Cross-train entry and mid-level application security engineers