ExtraHop
Senior Product Security Engineer with experience in modern software development practices and securing web applications, APIs, and software systems.
reserv
Full stack engineer at insurtech company Reserv, shaping future of technology and platform with AI and automation
Kueski
Design and build high-quality backend systems at Kueski, the leading BNPL platform in Latin America. Collaborate with teams, write efficient code, monitor infrastructure, and contribute to best practices.
Grow Therapy
Business Operations Associate role with remote work options, automating clinical processes and improving efficiency.
Binance
Senior Computer Vision Engineer with expertise in computer vision technologies and LLMs required for leading blockchain ecosystem
JumpCloud
Senior Software Engineer at JumpCloud: Collaborate on feature discovery, device management, and product development with a talented team.
Spotify
Develop scalable backend systems and data pipelines for Spotify's advertising platform using Java and cloud services.
Lumenalta
Join Lumenalta as a developer to build impactful software solutions
Mercury
Join Mercury's invoicing team as a Senior Frontend Engineer and create lovable products for startups. Competitive salary and equity range, plus flexible remote work options.
Dropbox
Full Stack Engineer at Dropbox: design & develop seamless user experiences, collaborate with cross-functional teams, and contribute to AI-enabled products.
Conga
Lead Conga's product marketing efforts, develop launch strategies, enhance sales effectiveness, and drive global success through effective go-to-market strategies and cross-functional alignment.
Red Hat
Lead the development and delivery of OpenShift Builds and Pipelines as a Senior Product Manager at Red Hat, collaborating with engineering teams and open-source communities to enhance CI/CD capabilities on the Kubernetes platform.
Binance
Senior Java Engineer for front-end gateways and cache-proxies at Binance, promoting tech best practices and working remotely or onsite.
Goodnotes
Senior Full Stack Engineer - Expand user base across multiple platforms using React/Redux, TypeScript, Node.js, and cross-platform SDKs.
StackAdapt
Develop full-stack solutions for StackAdapt's developer ecosystem using modern tech stacks like Ruby on Rails, React, GraphQL, and GoLang. Collaborate with teams to build scalable, well-documented software and contribute to technical planning.
CareMessage
Senior Software Engineer for Integrations team at CareMessage, developing healthcare integrations leveraging FHIR and HL7 standards.
WorkOS
Join WorkOS to build a modern dashboard and admin portal with cutting-edge tools like TypeScript, React, and Postgres. Collaborate on shared features, improve the developer experience, and contribute to a fast-growing SaaS platform.
Binance
Senior QA Engineer at Binance: Develop high-quality products with a dynamic team, utilizing automation testing development skills and Agile methodologies.
StackAdapt
Join StackAdapt as a Senior/Staff Data Engineer to build scalable ML pipelines, implement algorithms, and contribute to innovative advertising solutions in a collaborative environment with excellent benefits.
StackAdapt
Join StackAdapt as a Senior/Staff Data Engineer to design scalable data pipelines, implement ML algorithms, and contribute to microservice architectures for thousands of models. Enjoy competitive benefits and a supportive team environment.
ExtraHop
ExtraHop is seeking a Senior Product Security Engineer with experience in modern software development practices to build and operate product security program capabilities, tools, and processes. The ideal candidate will have a mix of software development and application security experience, enjoy working in a collaborative environment, and be familiar with securing web applications, APIs, and software systems. Key responsibilities include defining standards for secure development, performing threat modeling, and implementing vulnerability scanning tools. The position requires 8+ years of experience in security engineering, application security, and software development, as well as knowledge of cloud-based technologies such as AWS and container environments like Kubernetes and Docker. ExtraHop offers a competitive salary range of $136,600 - $180,000 per year, plus bonus and benefits.
Position Summary
Do you enjoy the challenge of securing complex systems? Want to be a part of a collaborative team that builds solutions that protect some of the biggest networks in the world? ExtraHop is seeking a Senior Product Security Engineer, experienced with modern software development practices to build and operate product security program capabilities, tools, and processes that allow us to keep pace with a rapidly changing security landscape, reduce security risk and enable organizational success.
We're looking for candidates with a mix of software development and application security experience, who enjoy working in a collaborative environment and taking direct action to identify, remediate and prevent vulnerabilities and security issues.
You must have experience with securing web applications, APIs and software systems, working with public cloud infrastructure, and be familiar with container technologies.
Key Responsibilities
Define standards for secure development and configuration of application and infrastructure components; and coordinate with other teams to ensure compliance with those standards
Perform threat modeling, security design reviews, code reviews, and security consultations with software and systems engineers
Implement, manage and improve vulnerability scanning tools (including SAST, DAST, SCA, and application fuzzing), configuration auditing and other security assessment tools
Build and improve vulnerability management processes and tooling to support system owners to successfully
Conduct manual pen testing of new features + existing systems; lead red team exercises
Coordinate third party pentesting and bug bounty programs
Triage vulnerability findings, evaluate risk, recommend effective remediation actions
Develop and deliver training on secure development standards and process
Contribute to disaster recovery and contingency planning
Perform and/or lead security incident response activities
Participate in an on-call rotation with occasional after-hours paging to review carefully prioritized security detections
Support security compliance & certifications programs (e.g., FedRAMP, NIST SP800-53, NIST CSF, SOC 2, ISO, FIPS 140-2, etc.) by becoming familiar with control requirements, owning/operating specific controls, and helping other teams meet requirements
Other duties as assigned
Required Qualifications
Bachelor’s degree or equivalent experience in computer science, engineering, or information technology
8+ years of experience in security engineering, application security and software development
Experience securing cloud-based web applications, APIs, data; performing security design reviews, code reviews and threat modeling exercises
Knowledge of software security vulnerabilities and best practices for Golang, Typescript, Javascript, Python, C/C++, React
Solid knowledge of Git
Experience working with container-based environments (Kubernetes, Docker, LXC, etc.)
Experience with AWS cloud platform
Must be a U.S. citizen
Preferred Qualifications
Obtained applicable certifications for software security, web application penetration testing or equivalent
Experience securing a cloud service (i.e., software as a service (SaaS)) offerings and shippable software products
Experience with meeting FedRAMP, NIST SP 800-53 and similar compliance requirements
Experience with Google Cloud Platform (GCP) and Azure
Experience deploying and maintaining systems using modern Orchestration and Infrastructure-as-Code technologies
The base salary for this position rages from 136,600 - 180,000 plus bonus + benefits
Note: employees, including fully remote staff, are expected to attend two in-person events every year. These events are typically held in our offices in downtown Seattle and run 4-5 days each.
