Wayfair

Senior Product Security Engineer

Toronto, Ontario
Java Kubernetes GraphQL GCP AWS Azure React Python
Search for More Jobs Talk to a recruiter now 💪
Description

Who We Are

Wayfair’s Application Security Team is responsible for safeguarding the security of development and custom products and features. We engage with hundreds of developers and development teams to review and improve the security of custom developed applications, products, and interfaces.  Additionally, we monitor and manage customer security and react to incidents as they arise. We design secure solutions and systems, build trusted relationships with teams across Wayfair and our customers, investigate security incidents, discover and mitigate vulnerabilities, both internal and external. 

What You’ll Do

  • Lead enterprise wide security initiatives by working closely with development teams
  • Strategize and collaborate with security development to build security solutions that can be used across the enterprise using Python and Java
  • Be the trusted security SME for the Org and liaise with development and product teams to develop & deploy secure products and features for customers, suppliers, partners, and employees
  • Implement ‘Sec’ in DevSecOps model of operations 
  • Conduct risk analysis, threat modeling and penetration testing of highly complex services to build secure products from ground up
  • Keep development teams up-to-date with secure coding practices by providing them training and the latest trends in secure development
  • Build runbooks and knowledge base to assist developers with secure development
  • Coordinate with and manage external hackers as part of Wayfair’s Bug Bounty Program
  • Maintain, tune, and own the web application firewall (WAF)

What You'll Need

  • Minimum of 5 years of experience in secure application development or application security
  • Experience with secure application development or Secure SDLC
  • Hands-on scripting experience in Python
  • Experience securing k8s, REST and GraphQL services with deep understanding of securing micro service architectures
  • Experience securing any of these cloud services platforms - GCP (Preferred), AWS, Azure
  • Understanding of Authentication mechanisms such as SAML, JWT, OAuth etc.
  • Understanding of build and release management, CI/CD platforms
  • Experience securing any of these cloud services platforms - GCP, AWS, Azure
  • Understanding of Authentication mechanisms such as SAML, JWT, OAuth etc.
  • Cloud Security Certifications is a plus
  • We would love to see experience with WAF, Bug Bounty Program and Open source security tools

Why You'll Love Wayfair

  • Time Off:
    • Paid Holidays
    • Paid Time Off (PTO)
    • Paid Sick Days
  • Health & Wellness:
    • Health & DentalBenefits 
    • Life Insurance
    • Disability Protection (Short Term & Long Term Disability) 
    • Global Wellbeing: Gym/Fitness discounts (including Peloton, Global ClassPass,)
    • Mental Health Support (Global Mental Health, Global Wayhealthy Recordings)
    • Caregiver Services
  • Financial Growth & Security:
    • RRSP (Registered Retirement Savings Plan)
    • Tuition Reimbursement 
  • Family Support:
    • Parental Leave Top-Up Program
    • Global Surrogacy & Adoption Policy
  • Professional Development & Recognition:
    • Rewards & Recognition 
    • Global Employee Anniversary Awards 
    • Paid Volunteer Work 
  • Unique Perks:
    • Employee Discount 
    • Global Pod Outings
  • Work/Life Balance:
    • Emphasizing a supportive & flexible work environment that encourages a balance between personal and professional commitments

We are looking forward to your application!

About Wayfair Inc.

Wayfair is one of the world’s largest online destinations for the home. Whether you work in our global headquarters in Boston or Berlin, or in our warehouses or offices throughout the world, we’re reinventing the way people shop for their homes. Through our commitment to industry-leading technology and creative problem-solving, we are confident that Wayfair will be home to the most rewarding work of your career. If you’re looking for rapid growth, constant learning, and dynamic challenges, then you’ll find that amazing career opportunities are knocking.

No matter who you are, Wayfair is a place you can call home. We’re a community of innovators, risk-takers, and trailblazers who celebrate our differences, and know that our unique perspectives make us stronger, smarter, and well-positioned for success. We value and rely on the collective voices of our employees, customers, community, and suppliers to help guide us as we build a better Wayfair – and world – for all. Every voice, every perspective matters. That’s why we’re proud to be an equal opportunity employer. We do not discriminate on the basis of race, color, ethnicity, ancestry, religion, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, genetic information, or any other legally protected characteristic.

Your personal data is processed in accordance with our Candidate Privacy Notice (https://www.wayfair.com/careers/privacy). If you have any questions or wish to exercise your rights under applicable privacy and data protection laws, please contact us at dataprotectionofficer@wayfair.com.

There are more than 50,000 engineering jobs:

Subscribe to membership and unlock all jobs

Engineering Jobs

60,000+ jobs from 4,500+ well-funded companies

Updated Daily

New jobs are added every day as companies post them

Refined Search

Use filters like skill, location, etc to narrow results

Become a member

🥳🥳🥳 389 happy customers and counting...

Overall, over 80% of customers chose to renew their subscriptions after the initial sign-up.

To try it out

For active job seekers

For those who are passive looking

Cancel anytime

Frequently Asked Questions

  • We prioritize job seekers as our customers, unlike bigger job sites, by charging a small fee to provide them with curated access to the best companies and up-to-date jobs. This focus allows us to deliver a more personalized and effective job search experience.
  • Salaries for the engineering jobs on our site range from $100K-$200K. On average, senior engineer positions on our EchoJobs are about $160K.
  • The EchoJobs positions have been sourced and vetted from the top companies to work for in the US as a software engineer, including LinkedIn and other reputable job sites. We also have syndicated jobs from companies that have just raised funding, as well as those that have great unique products and culture. From all of these sources, our founder, Morgan, has also resourced the company's authenticity in terms of their website, public appearance, and more.
  • Yes, our users asked us for just this, so now our search filters allow you to search for your top jobs via location, as well as by onsite, remote, or both. Approximately 30% of our jobs are remote, so you’ve got the best options for you!
  • We have not yet implemented this option, but are considering doing so in the future. For the moment, you would need to cancel your subscription, and resubscribe when you wanted to come back.
  • We add new jobs to EchoJobs every day! We scan our sources for the newest jobs, verify them, and post them to EchoJobs within minutes. We add about 2,000-3,000 new jobs for you each day!
  • From starting your job search to getting hired, the entire job search process can take us software engineers anywhere between 3-6 months. However, at EchoJobs, we’re striving to shorten this duration by finding the best, newest jobs for you, so you can do less job searching, and more applying.
  • We’d recommend checking EchoJobs daily, as we add new jobs to the site each day. Additionally, if you got a chance to read our previous email on “what makes EchoJobs different from any other job search tools,” we also recommended that you set a job alert based on your job filters, so if you get emails on those new jobs, you could be checking more than once per day.
  • If you decide to continue with us after the 1-month trial, we definitely recommend this, as we all know it usually takes 3-6 months to find a quality job as a software engineer these days. So to best support you, we just adjusted our membership options at EchoJobs to monthly, 3 months, or 12 months (this option is more for passive job seekers looking a little bit for the future if they want to come back to work or make a job switch potentially. This lets you see what’s out there in case an even better fit job becomes available.)
  • EchoJobs is truly the only job site of its kind. We want to be THE spot for you to find the best job for you, and haven’t encountered any other company doing this. Other job sites are in niches besides software engineering or focus on a small portion of engineering jobs (like a specific coding language). In the words of Morgan, our founder, “I think what makes EchoJobs different is the amount of jobs, frequency that we add new jobs (we add 2,000-3,000 new jobs daily!), and the powerful search engines to find exactly the job you want more easily and efficiently. We can provide you with the most jobs that are vetted by us, we’ll continually find more new jobs for you, and we make it easier for you to apply and get hired.

What Fellow Engineers Say