• 8+ years of application security engineering experience
• 12+ years of experience in software engineering
• Solid experience in OWASP best practices
• Proficiency in Javascript or Typescript
• Proficiency in one or more programming languages such as Golang, Java, Ruby, Python, or PHP
• Experience in SAST/DAST technologies
• Excellent written and oral communication skills
• Open, humble, and candid approach to communication

Desirable

• The Security Engineering team is responsible for all aspects of technical security, with the goal of providing all of our employees with the right guidance to help provide a safe environment for our users!
• As a senior member of our Application Security (AppSec) wing, you will lead some of our key AppSec initiatives, such as the cultivation of a security-centric culture within the organization
• Additionally, you will manage the integration and maturation of security measures within our SDLC
• You'll ensure that security is a fundamental aspect of all software development processes and work closely with developers to ensure our security standards and i
• Mature our application security posture by fostering a security culture that includes developing and refining coding standards, partnering with engineering teams, and developing threat models
• Collaborate with other technical leaders to develop and enforce security policies and standards organization-wide
• Coordinate with product and development teams to advocate for security-first design in all software projects
• Perform code reviews with a focus on identifying security issues and ensuring adherence to best security practices
• Work with external researchers to ensure that findings are mitigated effectively to reduce overall risk
• Managing the integration and maturation of security measures within our CI/CD systems
• Act as a mentor to junior security team members, guiding them in their professional development and security projects