Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will design and implement security features that protect user data, assess applications for vulnerabilities, and conduct code reviews, threat modeling, and penetration testing. You will embed secure coding practices in the development lifecycle, prioritize remediation, investigate incidents, and keep current with emerging threats and technologies.
Requirements
- Extensive production software engineering experience
- Experience with security-sensitive work including authentication, data handling, API design, or encryption
- Secure coding knowledge
- Knowledge of threat modeling, risk assessment, or incident response
- TypeScript or Python proficiency
- Cloud and cloud security experience
- AWS knowledge
- Communication skills for technical and non-technical audiences
Responsibilities
- Design and implement application security features
- Conduct security assessments, code reviews, threat modeling, and penetration testing
- Integrate secure coding practices throughout the software development lifecycle
- Track, analyze, and manage application vulnerabilities
- Use AI-assisted triage and prioritization to guide remediation
- Investigate application-related security incidents
- Stay current on security threats, vulnerabilities, and technologies
Benefits
- Above-market equity
- Relocation assistance for candidates moving to London