Apply

Senior Application Security Engineer

Posted 2024-08-29

View full description

πŸ’Ž Seniority level: Senior, 6+ years

πŸ’Έ Salary: 185000 - 220000 USD per year

πŸ” Industry: NFT Platform

🏒 Company: Magic EdenπŸ’° $500.0k ICO on 2022-07-01πŸ«‚ on 2023-02-14InternetCryptocurrencyMarketplaceWeb3

πŸ—£οΈ Languages: English

⏳ Experience: 6+ years

πŸͺ„ Skills: Software DevelopmentAndroidBlockchainEthereumTypeScriptRustCommunication SkillsDocumentation

Requirements:
  • 6+ years of experience building and securing software, with at least 4 years focused on application security.
  • Strong understanding of security risks, vulnerabilities and concepts in web and mobile applications.
  • Proficiency in TypeScript, Rust, and iOS/Android application development.
  • Proven experience in security design reviews, threat modeling, or security testing.
  • Excellent written and verbal communication skills.
Responsibilities:
  • Conduct comprehensive design reviews, threat modeling, and code reviews for new features and products.
  • Identify gaps in our software development process and take initiative leading efforts to address them.
  • Educate and train the engineering teams on secure coding best practices.
  • Investigate vulnerabilities reported via our bug bounty platform, determining their root cause and severity.
  • Document identified vulnerabilities clearly to enable quick action by the engineering team.
Apply

Related Jobs

Apply

🧭 Full-Time

πŸ” Energy technology

  • Experience as an Application Security Engineer.
  • Passionate about AWS technologies.
  • Experience in driving security by design.

  • Become a member of the newly formed security team within KrakenFlex.
  • Play a crucial role in securing software development processes.
  • Integrate security practices into the development workflow.
  • Shape a culture of security within the organization.
  • Collaborate closely with development and platform teams.
Posted 2024-11-22
Apply
Apply

πŸ“ United States

🧭 Full-Time

πŸ” Dating products

  • Technical background in security with experience in writing security-adjacent code.
  • Creative approaches in performing quick and impactful work.

  • Help ensure the highest standard of security for Match Group products.
  • Work spans across applications, infrastructure, devices, vendors, and anything else potentially at risk.

PythonSoftware DevelopmentCybersecurityCommunication SkillsAnalytical SkillsCollaborationProblem SolvingAttention to detailOrganizational skillsTime ManagementWritten communicationDocumentation

Posted 2024-11-13
Apply
Apply

πŸ“ US

🧭 Full-Time

πŸ’Έ 188000 - 230000 USD per year

πŸ” Mental healthcare technology

🏒 Company: Headway

  • 5+ years experience in security and/or software engineering roles with a focus on security-related projects.
  • Strong cross-functional collaboration skills.
  • Technical experience in building secure platforms and products.
  • Ability to tackle ambiguous problems in a fast-paced environment.
  • Drive innovation in security and privacy technologies.

  • Partner with Product and Engineering teams to implement secure features and conduct security reviews.
  • Develop and improve automated tooling for application security.
  • Define and build application guardrails for secure development.
  • Assist in ongoing security operations including incident response and vulnerability management.

AWSPythonKafkaTypeScriptFastAPIPostgresProduct designRedisReactSpark

Posted 2024-11-07
Apply
Apply

πŸ“ New York City, California, Colorado, Washington

πŸ’Έ 160000 - 200000 USD per year

πŸ” Visual collaboration software

  • 5+ years experience in a product security focused role.
  • Experience with product security at a multi-tenant SaaS company preferred.
  • Experience with vulnerability management.
  • Deep understanding of web application and mobile application security risks.
  • Deep understanding of Linux, Networking, Cryptography, and Cloud Architecture fundamentals.
  • Software development experience with Node.JS or other frameworks like React, Angular, etc. is preferred.
  • Familiarity with MongoDB, Node.JS, Ruby, and/or Python is preferred.
  • Excellent command of English, both written and verbal.

  • Performing security reviews of Mural product features and architecture.
  • Manage and operate our bug bounty program.
  • Lead penetration testing and manage any risks to remediation.
  • Implementation and operation of SAST and DAST technologies in the CI workflow.
  • Working closely with Engineering teams to track and manage product risks to remediation.
  • Working closely with Engineering to increase coverage of security testing.
  • Communicating and nurturing relationships with security researchers, customers, and other stakeholders.
  • Producing metrics to help track the health of our product vulnerability management strategy.
  • Educating and evangelizing secure coding best practices.

Node.jsSoftware DevelopmentMongoDBRubyStrategyAngularReactLinux

Posted 2024-10-25
Apply
Apply

πŸ“ Brazil

πŸ” Corporate wellness

🏒 Company: Wellhub

  • Experience designing and implementing security controls for CI/CD pipelines and micro-services infrastructure.
  • Experience with SAST, DAST, and Vulnerability Scanners.
  • Experience with Code Review.
  • Background as a Software Developer.
  • Experience with Public Cloud infrastructure (preferably AWS).
  • Knowledge in Linux, containers, and networking.
  • Proficiency in modern programming languages (Java, Go, Python, etc.).
  • Knowledge of cybersecurity frameworks like OWASP and Mitre’s ATT&CK.
  • Knowledge of Security Champions programs.
  • Experience with Infrastructure as Code.
  • Fluency in English and Portuguese.

  • Help define the DevSecOps strategy and security architecture eliminating vulnerabilities within applications from early development stages.
  • Ensure successful deliveries and promote long-term technical health of projects.
  • Provide security practices at all stages of the software development process.
  • Develop and implement tools and processes that facilitate collaboration between developers, security experts, and operations teams.

AWSPythonSoftware DevelopmentCybersecurityJavaStrategyGoCollaborationCI/CD

Posted 2024-10-20
Apply
Apply

πŸ“ Australia, Austria, Bangladesh, Belgium, Brazil, Canada, Colombia, Costa Rica, Croatia, Czech Republic, Denmark, Egypt, Estonia, Finland, France, Germany, Ghana, Greece, India, Indonesia, Ireland, Israel, Italy, Kenya, Mexico, Netherlands, Nigeria, Peru, Poland, Singapore, South Africa, Spain, Sweden, Switzerland, Uganda, United Arab Emirates, United Kingdom, United States of America, Uruguay

🧭 Full-Time

πŸ’Έ 109047 - 169455 USD per year

πŸ” Nonprofit, Technology, Open Source

  • Two or more years of application security experience, with knowledge of OWASP Top Ten and CWE Top 25
  • Strong understanding of modern, object-oriented PHP development
  • In-depth experience developing or auditing JavaScript
  • Demonstrated ability to exploit and mitigate application-level vulnerabilities
  • Experience conducting software security reviews using source code inspection, manual testing, and automated scanning
  • Ability to explain security issues to non-technical audiences
  • Sensitivity to security challenges in large, international projects
  • Strong understanding of cryptography in web application security
  • Experience using Linux for web application development and deployment tasks
  • Ability to maintain focus while working remotely

  • Triage and remediate reported security issues
  • Review and deploy features developed by the Foundation and community members
  • Work with other development teams to ensure safe architectural and implementation choices
  • Test and evaluate software to find bugs before attackers do
  • Provide application security concept reviews and promote application security best practices
  • Provide support for application security incidents and operations

PHPSoftware DevelopmentBashCybersecurityJavaJavascript*NixOAuthC (Programming language)Linux

Posted 2024-08-30
Apply