Technical Lead, StockX
Application Security Engineer
$140-160k
Plus equity and discretionary bonuses
Streetwear marketplace
Job no longer available
Streetwear marketplace
1001+ employees
Job no longer available
$140-160k
Plus equity and discretionary bonuses
1001+ employees
Company mission
To provide access to the world's most coveted items in the smartest way possible.
Role
Who you are
- 6 years of application security experience
- Bachelor’s degree preferred but not required
- GIAC, GSEC, CISSP, OSCP or other security certifications preferred
- Experience with web application security, including OWASP Top 10 vulnerabilities
- Familiarity with SecDevOps and CI/CD best practices
- Knowledge of cloud security, including AWS
- Knowledge of container security, including Docker or Kubernetes
- Excellent communication and interpersonal skills
- Strong problem-solving skills and attention to detail
- Willingness to learn and get up to speed quickly
- Excellent analytical, organizational and communication skills. Ability to say No
- Experience and ability to mentor senior and junior engineers in the team for best outcomes
What the job involves
- This hands-on security engineering position will be part of StockX's Information Security Cloud & Application Engineering team, leading efforts to enhance security of software development practices
- Members of this team work with several stakeholders to ensure appropriate processes, procedures, and controls are adequately designed and implemented to meet StockX security requirements, mitigate risks, and ensure compliance
- This is a critical IC role on the StockX Information Security team and will work with several stakeholders in Product, Engineering, Operations, Customer Service, Safety & Trust, & IT
- Assist software developers with secure coding and architecture practices
- Assist with metric collection and application methodologies for internal information risk management efforts
- Consult with teams to ensure data is properly handled throughout our environment
- Collaborate with business, technology, project management, architecture and information security teams to deliver secure solutions that support our business
- Serve as a liaison between the business, product, and engineering for technical security projects
- Stay current on information security practices
- Perform threat modeling, security reviews, and pen testing
- Manage and monitor bug bounty program
- Work with information security analysts to ensure visibility and security controls are implemented and maintained
- Enhance technologies and processes for information security analysts
- Mentor other information security team members
- Participation in one or more of the following:
- Maintaining organization’s security information tools (AlienVault, Snyk, GitGuardian, HackerOne, etc)
- Conducting code reviews and assisting with remediations across multiple apps and services (PHP, React, iOS, Android, NodeJS, etc)
- Help drive the shift left movement within StockX by implementing tooling within our CI/CD pipelines (DevSecOps)
- Driving best practices for AWS Cloud Security in greenfield projects, reviewing current practices, and auditing current policies/infrastructure
- Serving as a liaison between Compliance and Engineering to ensure we are meeting our regulatory requirements
Otta's take
Xav Kearney
CTO of Otta
StockX pairs buyers with sellers and verifies products through its live bid-and-ask structure, funding itself by charging a transaction fee on each sale. In return it verifies each item sold on the platform for authenticity and condition, setting it aside from competitors in this space such as TheRealReal.
The company is now hoping to further distinguish itself by working directly with brands to release products through the platform, with a vision to letting its customers set the price for goods in the same way investors do for shares in the stock exchange.
Despite issues including allegations of counterfeiting from Nike and a general slowdown in the resale goods market over 2022, StockX has continued its rapid growth, doubling the number of buyers on its network to 12 million. While a global economic slowdown has caused it to give up on plans for an IPO in the near term, StockX is nonetheless planning to expand its product line and expand internationally in the near future.
Insights
-7% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Apr 2021
$60m
SERIES E
Dec 2020
$275m
SERIES E
Total funding: $495m
Company benefits
- We promote the physical and emotional health of our team members and their families. We offer generous health benefits packages to keep our team members happy and healthy
- Rest and recharge when you need it the most: In addition to a full holiday schedule, we offer generous paid time off for our team members
- Be present with your new family member: Through our parental leave benefit, new parents receive paid time off
- Invest in your future. Many of our team members can take part in our pension or 401k programs
- Unlimited paid time off policy
- Work from home opportunities
- Health insurance
Company values
- Committed to What’s Right | We believe in the power of truth, authenticity, and transparency. We do the right thing, and we do it right
- Champion for Our Customer | We’re always listening and always learning so we can deliver the quality experience our customers deserve every single day
- Playing on the Dream Team | Our diverse and epic team is bound together by a deep belief in our vision, a passionate commitment to each other, and a shared joy in the adventure of it all. We play to win and have fun while doing it
- Hungry for What’s Next | We are committed to learning, growing and disrupting. We push ourselves and each other against the status quo, and we are not afraid to make mistakes
- Building a Legacy | We are forever building better - a better product, a better workplace and a better world. We’re going to keep raising the bar, changing the game, and ensuring we leave a mark that is never, ever forgotten
Company HQ
Downtown Detroit, Detroit, MI
Articles
Founders
Greg Schwartz
(COO)Worked at Deutsche Bank before founding Upto, a calendar software startup where he acted as CEO prior to founding StockX
Scott Cutler
(CEO)Worked as Executive Vice President at NYSE Euronext, a technology-enabled global transaction platform, as well as working as President of StubHub and holding senior roles at Ebay
Share this job
View 5 more jobs at StockX