Senior Security Engineer

Job Description

• Lead efforts to improve our security vulnerability management programs both proactively (audits, etc) and reactively (bug bounties, etc) • Establish a security framework (processes, training, etc) with engineering teams to incorporate security during all phases of application development lifecycle. • Build a strong "security minded" community for the long term. Expanding our security framework to the broader community as to help secure the Stellar Ecosystem. • Identify gaps in tools and automation in the Stellar Ecosystem, and help close those gaps by leveraging all SDF resources available (legal, business partnerships, grants, or developed in house).

Qualifications

• 5+ years of experience on a SecOps, AppSec team and/or Software development team. • Strong understanding of security libraries and common security flaws. • Hands on development experience with various languages. Being able to understand and work with a new language is a plus. • A strong track record working in a collaborative environment • Experience consulting with external vendors • Experience with MITRE, NIST, OWASP frameworks • Experience with common security / pen testing tools, nmap, Burp Suite • Experience with automated security scanners: Nessus, Qualys, Snyk • A strong understanding of OSI protocols such as TCP/IP, UDP, HTTP, HTTPS • A good understanding of Cloud Infrastructure access controls and best practices. • A good understanding of Linux • Experience performing security testing using fuzzing techniques

Benefits

• Competitive health, dental & vision coverage • Flexible time off + 15 company holidays including a company-wide holiday break • Paid parental leave • Life & ADD • Short & Long term disability • FSA & Dependent Care Accounts • 401K (4% match) • Employee Assistance Program • Monthly gym allowance • Daily lunch and snacks in-office • L&D budget of $1,500/year • Company retreats