The Senior Full-stack Software Engineer in Security will be responsible for securing our company products by identifying unaddressed areas of weakness and driving cleverly engineered, scalable solutions that improve our defense-in-depth. You will be responsible for design and development of core services related to authentication, authorization, encryption within the product to enable a vast majority of use cases securely. Skills you will leverage in this role include the ability to break down prior technical implementations of product use cases, and the ability to deliver incremental security value through small meaningful code refactors.
Reporting to the Sr Director of Trust and Security, you will contribute significantly to building and scaling the security of our company products. This position requires both advanced technical skills, strong communication skills, and the ability to influence people. You will be responsible for ensuring the continuous security of our company customer-facing products and internal tools. You will focus on driving and advising risk remediation based on research, and developing strong partnerships with engineering and product teams to accelerate the release of the software with security by design.
What Youll Do:
Research, design and implement security-oriented frameworks and features with the common goal of protecting our companys customers.
Upgrade the security of the current our company platform to cutting edge security solutions like Passkeys while balancing the needs of multiple customer personas and use cases.
Liaison between the engineering and security org to execute on the security roadmap.
Lead security software development while building technical leverage and influencing the direction of architecture, design, and roadmap.
Routinely participate in cross-vertical code reviews with an emphasis on Security.
Break down complex problems into sub-tasks & iteratively contribute to the goal of the security initiatives using agile practices.
Coach and mentor junior engineers in the team.
Reporting to the Sr Director of Trust and Security, you will contribute significantly to building and scaling the security of our company products. This position requires both advanced technical skills, strong communication skills, and the ability to influence people. You will be responsible for ensuring the continuous security of our company customer-facing products and internal tools. You will focus on driving and advising risk remediation based on research, and developing strong partnerships with engineering and product teams to accelerate the release of the software with security by design.
What Youll Do:
Research, design and implement security-oriented frameworks and features with the common goal of protecting our companys customers.
Upgrade the security of the current our company platform to cutting edge security solutions like Passkeys while balancing the needs of multiple customer personas and use cases.
Liaison between the engineering and security org to execute on the security roadmap.
Lead security software development while building technical leverage and influencing the direction of architecture, design, and roadmap.
Routinely participate in cross-vertical code reviews with an emphasis on Security.
Break down complex problems into sub-tasks & iteratively contribute to the goal of the security initiatives using agile practices.
Coach and mentor junior engineers in the team.
Requirements:
5+ years of experience as a software engineer with technical-leadership responsibilities
Prior experience architecting, building, launching and maintaining complex systems
Experience working in an Agile environment using technologies such as:
Java Spring Framework (3+ years), Hibernate or similar ORM technologies, JavaScript/Typescript, and React
Containers (Docker, Kubernetes, or similar)
Infrastructure as code (Vagrant, Docker, Ansible, Chef, Terraform, or similar)
Continuous integration (Github Actions or similar)
Integration of Security testing tools into CI pipelines
Defect tracking (Jira, ServiceNow, or similar)
Source code management (GitLab, GitHub, or similar)
Cloud environment (AWS, or similar)
Nice to Haves:
Knowledge of modern authentication mechanisms like SAML, JWT, OIDC connect, Passkey.
Knowledge of authorization frameworks for complex multi-tenant SaaS applications.
Knowledge of cryptographic primitives.
Knowledge of application security issues and tools.
Knowledge of compliance requirements for industry-standard certifications like PCI DSS, SOC2, HIPAA, and FedRAMP.
Experience working in small teams and delivering outsized impact.
5+ years of experience as a software engineer with technical-leadership responsibilities
Prior experience architecting, building, launching and maintaining complex systems
Experience working in an Agile environment using technologies such as:
Java Spring Framework (3+ years), Hibernate or similar ORM technologies, JavaScript/Typescript, and React
Containers (Docker, Kubernetes, or similar)
Infrastructure as code (Vagrant, Docker, Ansible, Chef, Terraform, or similar)
Continuous integration (Github Actions or similar)
Integration of Security testing tools into CI pipelines
Defect tracking (Jira, ServiceNow, or similar)
Source code management (GitLab, GitHub, or similar)
Cloud environment (AWS, or similar)
Nice to Haves:
Knowledge of modern authentication mechanisms like SAML, JWT, OIDC connect, Passkey.
Knowledge of authorization frameworks for complex multi-tenant SaaS applications.
Knowledge of cryptographic primitives.
Knowledge of application security issues and tools.
Knowledge of compliance requirements for industry-standard certifications like PCI DSS, SOC2, HIPAA, and FedRAMP.
Experience working in small teams and delivering outsized impact.
This position is open to all candidates.
