Entry Level Software Engineer - Application Security (Remote - Mexico)

Summary Yelp engineering culture is driven by our values: we’re a cooperative team that values individual authenticity and encourages creative solutions to problems. All new engineers deploy working code their first week, and we strive to broaden individual impact with support from managers, mentors, and teams. At the end of the day, we’re all about helping our users, growing as engineers, and having fun in a collaborative environment. Yelp is looking for an entry level Application Security Engineer to join our team and help safeguard our applications and services from emerging security threats. In this role, you’ll have the opportunity to learn and make a meaningful impact on the security of products used by millions of people every day. You’ll work closely with software engineers across the company to build secure-by-default systems and ensure security is woven into every stage of development. As a Software Engineer on the Security team at Yelp, you will contribute to full stack projects while collaborating with our engineering teams to build safe tools, libraries, and features that protect our users and infrastructure. You’ll identify and fix vulnerabilities in our applications and services, and partner with external researchers through our public bug bounty program to continuously improve our security posture. This opportunity is fully remote and does not require you to be located in any particular area in Mexico. We welcome applicants from throughout Mexico. We’d love to have you apply, even if you don’t feel you meet every single requirement in this posting. At Yelp, we’re looking for great people, not just those who simply check off all the boxes. What you'll do: Collaborate with cross-functional engineering teams (mobile, frontend, backend) to perform threat modeling, conduct security reviews, and design secure libraries that enhance the security of Yelp’s applications and services. Develop and deploy services for login and account security specific to Yelp’s website and mobile apps. Support security incident response and contribute to the team’s operational activities, including triaging bug bounty submissions and vulnerability reports from internal security tools. Build automated solutions to detect and prevent potential security threats within Yelp’s application and services. Promote security best practices and policies to be incorporated within software development life cycle. Be a team player who lives the Yelp Values and thrives in a diverse and inclusive work culture. What it takes to succeed: Previous education or equivalent experience in Cybersecurity, or a related field. Full Stack software development background with an interest in application security. Understanding of web application security, mobile security, APIs, and cloud security. Command of your favorite modern programming language(s) -Python, Java, Javascript - React, Swift and/or Objective-C. Security research and pen testing experience are assets. What you'll get: This opportunity has the option to be fully remote in all locations across Mexico. Full responsibility to contribute to and lead projects from day one. A dynamic, collaborative, global and diverse team environment. Competitive salary and bonus structure. A competitive benefits package that includes paid time off and remote work reimbursements. Flexible working hours and meeting-free Wednesdays. Regular 3-day Hackathons and bi-weekly learning groups. Opportunities to participate in virtual events and conferences. Quarterly team offsites. Closing At Yelp, we believe that diversity is an expression of all the unique characteristics that make us human: race, age, sexual orientation, gender identity, religion, disability, and education — and those are just a few. We recognize that diverse backgrounds and perspectives strengthen our teams and our product. The foundation of our diversity efforts are closely tied to our core values, which include “Playing Well With Others” and “Authenticity.” We’re proud to be an equal opportunity employer and consider qualified applicants without regard to race, color, religion, sex, national origin, ancestry, age, genetic information, sexual orientation, gender identity, marital or family status, veteran status, medical condition, disability, or any other protected status. We are committed to providing reasonable accommodations for individuals with disabilities in our job application process. If you need assistance or an accommodation due to a disability, you may contact us at accommodations-recruiting@yelp.com or 1-415-969-8488. Note: Yelp does not accept agency resumes. Please do not forward resumes to any recruiting alias or employee. Yelp is not responsible for any fees related to unsolicited resumes. #LI-Remote Recruiting and Applicant Privacy Notice


Collaborate with cross-functional engineering teams (mobile, frontend, backend) to perform threat modeling, conduct security reviews, and design secure libraries that enhance the security of Yelp’s applications and services. Develop and deploy services for login and account security specific to Yelp’s website and mobile apps. Support security incident response and contribute to the team’s operational activities, including triaging bug bounty submissions and vulnerability reports from internal security tools. Build automated solutions to detect and prevent potential security threats within Yelp’s application and services. Promote security best practices and policies to be incorporated within software development life cycle. Be a team player who lives the Yelp Values and thrives in a diverse and inclusive work culture.


Previous education or equivalent experience in Cybersecurity, or a related field. Full Stack software development background with an interest in application security. Understanding of web application security, mobile security, APIs, and cloud security. Command of your favorite modern programming language(s) -Python, Java, Javascript - React, Swift and/or Objective-C. Security research and pen testing experience are assets.