Senior Application Security Engineer

• Automate security processes and tooling within the CI/CD pipeline
• Integrate SAST, DAST, and SCA tools to prevent classes of security issues
• Manage collaboration with external firms on security-focused code reviews and penetration tests
• Triage security findings and consult teams on severity and resolution
• Support product and development teams on application security
• Conduct threat modeling and design reviews
• Administer and support the ongoing bug bounty program and security tools
• Assist the triage team and collaborate with external researchers and the platform vendor
• Work with development teams to validate reported vulnerabilities and verify fixes mitigate associated risks
• Lead efforts to promote security best practices and foster a secure development culture
• Focus primarily on Windows application security, contributing to macOS, iOS, and Android security as needed

• Substantial experience securing Windows applications
• Proficiency managing a bug bounty program
• Hands-on experience with SAST, DAST, and SCA tooling
• Ability to use GitHub and manage relevant GitHub Actions and GitHub Advanced Security features
• Experience in code review and security analysis of desktop applications
• Advanced knowledge of securing Windows desktop applications
• Software development skills in C, C++, C#, or Java
• Experience securing cloud services, desktop, and mobile applications
• Excellent written and verbal communication skills
• Ability to adapt quickly in a growing organization and solve problems collaboratively across development teams
• Willingness to learn new security technologies as business needs evolve
• Ability to work independently in high-risk environments with minimal supervision
• Red teaming experience (nice to have)
• CISSP, CEH, or GIAC certification (nice to have)
• Reverse engineering (nice to have)
• Hands-on experience in AWS and managing infrastructure with Terraform (nice to have)
• Advanced knowledge of macOS, iOS, and Android security (nice to have)
• Thorough knowledge of digital forensics methodology (nice to have)
• Strong background in security architecture, system administration, and networking (nice to have)

• Comprehensive medical, dental, and vision insurance coverage
• Employee Referral Bonus Program
• Wellness programs
• Comprehensive Time Off policy
• An opportunity to do something great for yourself and the world!