Senior Security Engineer - Application Security
New
K
KinHomeowners insurance
For all other positions, these roles can sit in any of the following 41 states: AL, AR, AZ, CA (exempt only), CO, CT, FL, GA, ID, IL, IN, IA, KS, KY, LA, MA, ME, MD, MI, MN, MO, MT, NC, NE, NJ, NM, NV, NY, OH, OK, OR, PA, SC, SD, TN, TX, UT, VT, VA, WA, and WI. Please only apply if you are able to live and work full-time in one of the states listed above. For remote technical positions located in Canada, we are only able to hire individuals who reside in Ontario. Applicants must be able to live and work full-time in Ontario to be considered.Full-TimeSenior
Salary$141,890 - $159,650; $141,890 – $159,650 • Offers Equity
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years of experience in software engineering or security engineering, including at least 1 year focused on security.
- Required Skills
- AWSRubyCI/CDTerraform
Requirements
- Have 5+ years of experience in software engineering or security engineering, including at least 1 year focused on security.
- Be proficient hands-on in at least one backend programming language and able to write and ship production code fixes; Ruby is strongly preferred.
- Have hands-on experience with SAST/DAST tools in CI/CD pipelines and turning findings into fixes.
- Have experience driving vulnerability remediation at scale, including dependency and supply-chain vulnerabilities, using tools such as GitHub Advanced Security.
- Have experience performing secure code reviews, architecture reviews, and threat modeling.
- Have hands-on experience securing AWS environments, including IAM, VPCs, and WAF.
- Have experience remediating infrastructure-as-code in Terraform.
- Be able to explain security concepts, risks, and tradeoffs to technical and non-technical audiences.
Responsibilities
- Own vulnerability remediation across engineering, drive findings to resolution, and enforce remediation SLAs.
- Write and ship code to harden systems and resolve or prevent issues at the source.
- Lead secure code and architecture reviews, identifying risks and delivering actionable recommendations.
- Partner with developers on dependency and supply-chain security, including hands-on remediation of critical third-party package vulnerabilities.
- Build security tooling and automation for detection, triage, and remediation.
- Identify and collaborate on remediation of cloud vulnerabilities in AWS environments and Terraform-managed infrastructure.
- Lead threat modeling with engineering teams to surface security risks early in development.
- Monitor emerging application, code, and AI security threats and translate them into proactive remediation and guidance.
- Mentor engineers on secure coding practices and embed security into day-to-day development.
View Full Description & ApplyYou'll be redirected to the employer's site
