Engineer, AppSec

About the Role

Join the Security team as an Application Security Engineer, where you'll protect sensitive data for millions of users by combining hands-on software development for core security services (60-70%) with security engineering responsibilities (30-40%). You will play a key role in shaping security practices across development teams and owning critical security services.

Responsibilities

• Shape security practices across development teams and empower them to build and ship secure products.
• Own critical security services protecting sensitive data at scale.
• Develop core security infrastructure services focusing on key management, encryption, and authentication.
• Build robust distributed systems leveraging Redis, PostgreSQL, and AWS services.
• Maintain high code quality standards through comprehensive testing.

Requirements

• Strong Python backend development expertise, with experience building and maintaining production services.
• Hands-on experience with Redis and PostgreSQL.
• Proficiency with distributed systems and cloud platforms (AWS).
• Strong understanding of cryptographic principles, authentication mechanisms, authorization patterns, and secure key management practices.
• Experience with security architecture and threat modeling.
• Strong written and verbal communication skills to deliver constructive feedback regarding security matters.
• Ability to balance security requirements with operational or business needs.
• Understanding of secure development lifecycle and secure coding practices.
• Knowledge of common web / API vulnerabilities and mitigations (e.g. OWASP Top 10).
• Ability to identify effective ways to eliminate whole classes of vulnerabilities.
• Collaboration is second nature, with a willingness to work alongside colleagues to achieve common goals.
• Adaptable to the needs of a fast-growing company.

Nice-to-Haves

• Experience using AI tooling for work or personal use, or a willingness to learn and use it regularly.