Staff Software Engineer - Application Security

Our client is a well funded and growing company based in San Francisco, CA. However, this is a 100% remote position open to qualified, Security professionals located in the United States. They have a culture of inclusiveness and they value diversity. There are lots of opportunities for growth and professional development.

They are looking for an experienced Staff Security Engineer to join their security team. This role combines research, analysis, prevention, detection and forensics. You will be engaged in everything from building safer and more security systems to detecting advanced (APT) attackers. This role will require constant adaptation to new challenges that may arise in their ever-growing surface area.

Responsibilities

Work with teams to discover and implement new detection capabilities and logging sources.; Be a thought leader in building our client's security road-map.; Be a security subject matter expert and respond to internal security engineering questions/requests.; Operate external bug bounty programs to source vulnerability information.; Architect, design and implement defensive systems that enhance their security.; Carefully balance security risk and product advancement.; Respond to security and privacy incidents, write incident reports, and participate in post-postmortems.; Perform penetration testing on their internal and external applications.; Integrate customer security requirements into product and system design.

Requirements

Bachelor's degree in Computer Science/Engineering or equivalent practical experience.; 8+ years of experience on security-focused teams .; Stellar programming/coding fundamentals.; Expertise working with web services deployed on Cloud providers.; Programming mastery in Go, Python, C/C++, JavaScript, TypeScript.; Demonstrated ability to ship production-quality software in a dynamic environment.; Strong communication skills and drive to collaborate across teams.; Deep knowledge with data privacy regulations and compliance e.g. SOC 2, GDPR, CCPA; Experience working with firmware and hardware security.