Application Security Engineer

The Senior Security Engineer will be responsible for:

• Assessing & implementing security in code, applications, infrastructure, CI/CD and enterprise technologies initiatives;

• Threat model, design and drive engineering solution to preserve & improve security, privacy and user trust in technology;

• Lead projects aimed at security of or privacy in open source, web applications, and cloud infrastructure risks, inclusive of implementing security technologies, tools & controls;

• Helping steer and maintain security at RiseUp across all domains, inclusive of via training, vendor & tools security assurance, audits(like ISO 27001) & vulnerability management and more.

We are looking for someone who has:

• Experience of five years, or more in software or engineering security roles
• Or 10+ years of experience in technical roles with security responsibilities
• Working with developers
• Experience working in R&D or with R&D and infrastructure teams
• Inclusive of training, code & infrastructure review, solution design and security assessment
• the following technologies;
• AWS, docker, github, nodejs, git, application secrets management, software vulnerability scanning, linux-based web servers, cicd, npm
• the following security tools;
• software vulnerability scanning, endpoint security/mdr, web application firewall, open source / software inventory security management, burp proxy, fuzzers, etc
• Can code or script in bash and/or nodejs (javascript)
• Demonstrates technical security excellence via open source contributions, collaborative research with non-for-profit groups, technical certifications, stack exchange and/or senior security certifications such as CISSP, Offensive Security, AWS or GIAC

Soft skills and Fit - 

• An outgoing people-influencer, communicator and ally-maker
• A driven & proactive problem solver who’s happy to take on any task or technology and is always eager to learn more

You will be an integral part of an established and growing team, leading in your respective domains but also contributing to other core security operations.

We have a stellar team and a wonderful mission - join us!