ExtraHop
Senior Product Security Engineer with experience in modern software development practices and securing web applications, APIs, and software systems.
Awin Global
Senior AI Engineer at Awin: Design and deploy conversational AI models using LLMs, collaborate with cross-functional teams, and contribute to a diverse and inclusive company culture.
Awin Global
Senior AI Engineer at Awin: Design and deploy conversational AI models using LLMs, collaborate with cross-functional teams, and contribute to a diverse and inclusive company culture.
Awin Global
Senior AI Engineer at Awin: Design and deploy conversational AI models using LLMs, collaborate with cross-functional teams, and contribute to the company's mission to build a leading open partner ecosystem.
Awin Global
Senior AI Engineer at Awin: Design and deploy conversational AI models using LLMs, collaborate with cross-functional teams, and work remotely.
saas.group
Senior Software Engineer for browser-automated scraping system using Node.js (TypeScript) at Keyword.com
SADA India
Senior Cloud Infrastructure Engineer at SADA India: Deliver high-quality infrastructure projects on Google Cloud Platform
Protegrity
Join Protegrity as a Senior Software Engineer and develop innovative data protection solutions with a leading global software provider.
Clipboard Health
As a Senior Software Engineer (L3) at Clipboard Health, you will deliver high-quality, scalable code using Node/ NestJS and React/TypeScript. Collaborate with global teams to build impactful healthcare solutions, embrace remote-first culture, and participate in on-call rotations for system reliability.
Clipboard Health
Join our remote Engineering team as a Software Engineer to develop scalable web and mobile applications using modern technologies like Typescript, React, NestJS, and Node.js. Work on impactful healthcare solutions with a flexible schedule and meaningful benefits.
Workiva
Lead GTM systems transformation at Workiva, collaborating with senior stakeholders to optimize sales processes and drive business impact. Utilize expertise in Salesforce Sales Cloud and other tools to enhance efficiency and productivity.
reserv
Senior Machine Learning Engineer at Reserv, developing AI models and machine learning solutions for insurtech company
CAST AI
Design and deploy sophisticated data models at CAST AI, leveraging cloud-native technologies and contributing to machine learning operations. Collaborate with cross-functional teams and stay ahead of industry trends while enjoying benefits like flexible work hours and company equity.
Apollo.io
Build and productionize Machine Learning models for Apollo products like Search and Recommendations. Leverage data to predict user behaviors and optimize their experience. Improve ML stack and maintain scalable data pipelines.
Kueski
Design and build scalable pipelines for data preparation and automate machine learning models
Invisible Technologies
Senior Machine Learning Engineer at Invisible Technologies: Build robust backend systems, optimize cloud infrastructure, and collaborate on advanced ML technologies.
Entefy
Senior Machine Learning Engineer at Entefy: Unstructured data classification & clustering expertise required.
Splice
Senior Machine Learning Engineer for generative audio/music applications
Rackspace
Senior Cloud Engineer (AWS) - Design, automate, deploy services on AWS using DevOps techniques and infrastructure-as-code tools.
reserv
Full stack engineer at insurtech company Reserv, shaping future of technology and platform with AI and automation
ExtraHop
ExtraHop is seeking a Senior Product Security Engineer with experience in modern software development practices to build and operate product security program capabilities, tools, and processes. The ideal candidate will have a mix of software development and application security experience, enjoy working in a collaborative environment, and be familiar with securing web applications, APIs, and software systems. Key responsibilities include defining standards for secure development, performing threat modeling, and implementing vulnerability scanning tools. The position requires 8+ years of experience in security engineering, application security, and software development, as well as knowledge of cloud-based technologies such as AWS and container environments like Kubernetes and Docker. ExtraHop offers a competitive salary range of $136,600 - $180,000 per year, plus bonus and benefits.
Position Summary
Do you enjoy the challenge of securing complex systems? Want to be a part of a collaborative team that builds solutions that protect some of the biggest networks in the world? ExtraHop is seeking a Senior Product Security Engineer, experienced with modern software development practices to build and operate product security program capabilities, tools, and processes that allow us to keep pace with a rapidly changing security landscape, reduce security risk and enable organizational success.
We're looking for candidates with a mix of software development and application security experience, who enjoy working in a collaborative environment and taking direct action to identify, remediate and prevent vulnerabilities and security issues.
You must have experience with securing web applications, APIs and software systems, working with public cloud infrastructure, and be familiar with container technologies.
Key Responsibilities
Define standards for secure development and configuration of application and infrastructure components; and coordinate with other teams to ensure compliance with those standards
Perform threat modeling, security design reviews, code reviews, and security consultations with software and systems engineers
Implement, manage and improve vulnerability scanning tools (including SAST, DAST, SCA, and application fuzzing), configuration auditing and other security assessment tools
Build and improve vulnerability management processes and tooling to support system owners to successfully
Conduct manual pen testing of new features + existing systems; lead red team exercises
Coordinate third party pentesting and bug bounty programs
Triage vulnerability findings, evaluate risk, recommend effective remediation actions
Develop and deliver training on secure development standards and process
Contribute to disaster recovery and contingency planning
Perform and/or lead security incident response activities
Participate in an on-call rotation with occasional after-hours paging to review carefully prioritized security detections
Support security compliance & certifications programs (e.g., FedRAMP, NIST SP800-53, NIST CSF, SOC 2, ISO, FIPS 140-2, etc.) by becoming familiar with control requirements, owning/operating specific controls, and helping other teams meet requirements
Other duties as assigned
Required Qualifications
Bachelor’s degree or equivalent experience in computer science, engineering, or information technology
8+ years of experience in security engineering, application security and software development
Experience securing cloud-based web applications, APIs, data; performing security design reviews, code reviews and threat modeling exercises
Knowledge of software security vulnerabilities and best practices for Golang, Typescript, Javascript, Python, C/C++, React
Solid knowledge of Git
Experience working with container-based environments (Kubernetes, Docker, LXC, etc.)
Experience with AWS cloud platform
Must be a U.S. citizen
Preferred Qualifications
Obtained applicable certifications for software security, web application penetration testing or equivalent
Experience securing a cloud service (i.e., software as a service (SaaS)) offerings and shippable software products
Experience with meeting FedRAMP, NIST SP 800-53 and similar compliance requirements
Experience with Google Cloud Platform (GCP) and Azure
Experience deploying and maintaining systems using modern Orchestration and Infrastructure-as-Code technologies
The base salary for this position rages from 136,600 - 180,000 plus bonus + benefits
Note: employees, including fully remote staff, are expected to attend two in-person events every year. These events are typically held in our offices in downtown Seattle and run 4-5 days each.
