Lead Security Engineer

Who we are   

 We are a dedicated team of product security engineers committed to developing and supporting ground-breaking software products. Together we will work to safeguard the future, enabling wellness businesses worldwide to empower their customers to lead healthy lives. Driven by a higher purpose, we continuously challenge ourselves and our organization to excel, recognizing the strength that comes from collaborative efforts toward a common objective. We are strong advocates for a diverse workplace, fostering an environment where individuals can bring their authentic selves to contribute to our shared success. At the core of our achievements is a deep belief in the value of our people. If you share our passion and vision, we invite you to consider joining our team. Together, we can explore remarkable feats and make a lasting impact!  

Your role  

As a Lead Security Engineer, you will be responsible for contributing to the success of the Product Security team in several key areas.  You’ll work to reduce security friction across engineering by fostering partnership and collaboration to enhance our security posture.  Security enablement will be a crucial aspect of your responsibilities involving research, secure architecture, and design.  You’ll play a vital role to ensure solutions are secure by default.  You will facilitate continuous security testing, measurability, and reporting on the impact of security initiatives.   

You’ll pursue continuous improvement to help Mindbody achieve its mission: Powering the world’s fitness and wellness businesses and connecting them with more consumers, more effectively, than anyone else.  
 

You will 

• Partner with engineering and platform teams to identify and solve complex security problems. 

• Contribute to the vision and roadmap to increase the security posture of our code and products.  

• Conduct security reviews of product designs, code, and configurations to minimize software risk. 

• Conduct comprehensive threat modeling exercises and testing to identify security risks and vulnerabilities while collaborating with product teams. 

• Identify security gaps and provide strategic recommendations for remediation. 

• Address security issues identified throughout the secure software development lifecycle.  

• Conduct security testing beginning from the product planning phase continuing through production deployment. 

• Lead in the research, development, and implementation of new product security capabilities.  

• Develop and implement quantifiable application risk assessments of Mindbody and ClassPass products and infrastructure.  

• Scale the impact of Cyber Security by contributing and leading various Security Champion Initiatives.  

• Define and implement security requirements ensuring alignment with industry standards and best practices.  

• Ability to work independently, and lead both cyber security and cross functional security initiatives. 

• Stay abreast of emerging security threats, vulnerabilities and controls. 

About the right team member 

You are an intellectually curious architect who is passionate about creating impactful security solutions and who is excited to share them with others using your excellent verbal and written communication skills. You are a cloud security, application security, and network security expert. You have previous software experience and are eager to apply those skills to grow Product Security while working with fellow team members, security champions, company leadership and others across the broader Product Development and Engineering organization.   

You will thrive in this role with experience 

• 7+ year experience across multiple security domains with an emphasis on product security and cloud-native security.   

• 4+ year security architecture experience executing product security initiatives (i.e. secure architecture, SSDLC, threat models, and risk assessments). 

• Expert knowledge of modern web application components, development, architecture, and design principles. 

• Hands-on experience with design, code review, and securing products and solutions for public cloud-based applications and infrastructure. 

• Experience architecting and developing product-centric security solutions. 

• Expert knowledge securing internal microservices and public API’s. 

• Experience securing applications deployed using Docker, Kubernetes, and public cloud environments. 

• Product Security experience working for a SaaS-based organization. 

• Excellent leadership and project management skills, with a track record of driving security initiatives within software development teams. 

• Excellent communication skills (both written and verbal).  

• Self-motivated, self-directed, and self-organized. 

 
Nice to have experience 

• SAST, SCA, DAST, WAF, and CNAPP solutions.  

• Offensive testing tools like Burp Suite and Kali Linux. 

• Penetration testing.