Senior Product Security Engineer
- Conduct code reviews of our applications and security configuration reviews of our AWS infrastructure
- Design, implement, execute and report on penetration tests of our services and infrastructure
- Contribute a security perspective to our application and infrastructure design process
- Develop threat models for our current and planned systems and infrastructure
- Conduct or organize security training and outreach for our development teams
- Design and develop security tools to improve our automated monitoring
- Identify key performance metrics for security metrics and implement instrumentation for those metrics
- Develop and execute our processes for security event incident response
- Perform third-party vendor security assessments and verify security compliance of vendors over time
- 6+ years of experience in the security industry working in any combination of the following areas: threat modeling, secure coding, web and mobile application security, identity management and authentication, software development, cloud security or penetration testing
- Experience implementing security solutions in mobile apps, web apps and backend services
- Experience writing and reviewing code (Java, Python, Node or similar)
- Experience working effectively with software engineering teams
- Excellent written and verbal communication skills
- Experience responding to security events preferred
98point6 provides equal employment opportunities to all without regard to race, color, religion, sex (including sexual orientation or gender identity), national origin, age, disability, genetic information or other protected status.