Lead Security Engineer

What you’ll do

• Advocate developer-centric security best practices throughout ASAPP
• Perform technical security assessments, code audits, and design reviews
• Develop and document technical solutions to help mitigate security vulnerabilities
• Conduct research to identify new attack vectors against ASAPP products and services
• Participate in related penetration testing, red teaming, and other offensive security exercises
• Contribute to securely configuring our cloud environments
• Participate in the security incident detection and response processInteract and collaborate with different engineering teams.
• Participate in on-call responsibilities along with your teammates

What you’ll need

• 5+ years of experience identifying potential cybersecurity attacks and mitigations across common attack vectors (OWASP Top 10)
• Familiar with container ecosystems (docker, k8s, helm), and security best practices
• Deep understanding of cloud-based (AWS) infrastructure and security technologies
• Experience with IAM and RBAC and IdP solutions
• Experience writing IaC especially Terraform
• Proficient in at least one high-level programming language ( Python preferred )
• Strong interpersonal and communication skills

What we’d like to see

• B.S. in Computer Science or related field, or equivalent experience
• Involvement in the Security community and industry participation is a plus
• Experience in product-oriented environments
• Experience and familiarity with machine learning development, both from the perspective of an engineer and as an attacker/defender
• Previous experience doing security on agile/fast startup environments 
• Experience with cloud-native architecture

Benefits

• Competitive compensation
• Stock options
• Healthcare for the family group
• Wellness perks 
• Mac equipment
• Learning & development stipend
• 3 weeks of vacation
• English lessons