Senior Security Engineer

Who you are

• The ideal candidate combines technical acumen with an ability to lead by influence and communicate clearly
• Technically, this person will be a security generalist with one or more areas of deep expertise
• In their communication, they will clearly articulate risks to technical and non-technical audiences alike
• Interpersonally, successful candidates will effectively harmonize disparate opinions while effectively
• Prioritizing risks to guide their partners towards secure solutions
• Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply
• Experience (non-internship) in scripting, programming, and security code reviewing in a common programming language
• Experience (non-internship) in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools
• Experience working in identifying security issues and risks, and developing mitigation plans
• Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
• Experience as a mentor, tech lead or leading an engineering team
• Experience in scaling security reviews with AI/LLM
• Experience applying threat modeling or other risk identification techniques or equivalent
• Experience with security in service-oriented architectures/microservices and web services

What the job involves

• As a Senior Security Engineer, you will collaborate with software development teams to ensure we keep our customers safe while developing these novel services
• In a given day, you might be inspecting an application’s code for security issues, building a new framework to help our software developers build faster and more securely, or fine-tuning the design for a new service alongside its software developers
• Creating, updating, and maintaining threat models for a wide variety of software projects
• Manual and Automated Secure Code Review, primarily in Java, Python and Javascript
• Development of security automation tools
• Adversarial security analysis using novel tools to augment manual effort
• Security training and outreach for internal development teams
• Security architecture and design guidance
• Independently solve security problems that require novel methods or approaches
• Influence your team’s and partners’ process, priorities, and choices to improve outcomes
• Be on the forefront of AI adoption in process and tooling