• Excellent empathy for customers
• An ability to carefully consider tradeoffs between security and user experience
• Proficiency in standard software engineering, including discussions on schema and app design
• Three or more years of experience in software security roles or equivalent
• Full-stack development experience, with excitement to learn and work with Haskell, React, and TypeScript
• Exceptional security judgment, a grasp of product concepts, and effective communication skills are highly valuable in these collaborative scenarios

Desirable

• The team you would be joining is primarily focused on engineering, with a primary goal of addressing security challenges through code
• Our work involves tackling a variety of security issues, ranging from developing security features to creating infrastructure that assists other teams in building their features securely
• Currently, our main projects include enhancing our admins' permissions system, devising a streamlined method for users to verify their identity during phone calls, and a few smaller initiatives. In addition to coding, we actively engage with other teams
• This involves explaining vulnerabilities identified through our bug bounty programs, addressing security concerns related to ongoing projects, and responding to queries from other teams
• Address key security features within the product, such as developing passkey support, enhancing the security dashboard, refining user-facing audit logs, and implementing SAML
• Upgrade our pentest environment to ensure it aligns with our security researchers' needs, addressing challenges like data sufficiency and effective stubbing of third-party interactions
• Contribute to bug bounty program triage by validating reports, coordinating responses, and managing researcher payments, while collaborating with teams to resolve identified issues
• Analyze vulnerabilities and proactively target root causes by creating tools for codebase scanning, establishing effective patterns and systems, and enhancing security training for engineers
• Assist teams in threat modeling and cultivating a security mindset for their features, leveraging dedicated security expertise to complement the existing skills of our engineers
• Investigate user security issues, utilizing product knowledge and logs to understand incidents and proposing improvements to monitoring for quicker detection of similar issues