Application Security Engineer

• Collaborate with development teams, Site Reliability Engineering, and other stakeholders to strengthen security best practices throughout the SDLC
• Identify security improvements independently and implement them
• Implement, manage, and automate vulnerability management processes
• Prioritize and remediate vulnerabilities from internal scans, penetration tests, and bug bounties
• Conduct threat modeling, code audits, and design reviews with engineers
• Provide actionable security recommendations and workable solutions
• Establish and automate threat hunting capabilities
• Enhance logging capabilities related to security events
• Integrate and manage dynamic and static code analysis tools
• Ensure security tools operate effectively within the development pipeline

• 4+ years experience in secure development or application security
• Deep knowledge of security concepts such as authentication and web architecture
• Experience with Node.js, Go, or similar technologies
• Experience running bug-bounty, penetration testing, and vulnerability scanning programs
• Experience setting up and maintaining SAST, DAST, IAST, and SCA tooling
• Experience using assessment tools such as Burp, ZAP, Qualys, and Nessus
• Experience building and maintaining WAF solutions
• Familiarity with industry security practices, standards, and regulations such as FedRAMP, SOC2, and HIPAA is a plus
• Familiarity with GCP/AWS and Kubernetes infrastructure security is a plus
• Self-motivated and goal driven, able to identify what needs to be done and do it
• Able to respectfully challenge teammates and managers in pursuit of excellence
• Strong sense of urgency with an action-oriented mindset
• Able to collaborate and adapt to shifting priorities
• Comfortable with asynchronous communication including Slack, email, and Zoom

• Health insurance from the first days, regardless of the probationary period
• Christmas holidays from December 25 to December 31
• Cooperation with Superhumans center and Veteran HUB
• Psychological counseling provided by the Veteran Hub
• Internal policy making the company friendly to military and veterans