Sr. Application Security Architect

We are looking for a Sr. Application Security Architect, who will be responsible for aligning our Software Development Life Cycle with security best practices, conducting security assessments on code changes and in general maturing our application security framework, processes and toolsets.

Responsibilities

• Own the application security capability
• Drive the technical direction and roadmap of the application security program
• Lead application security reviews and threat modeling, including code reviews and dynamic testing
• Collaborate with development teams to prepare application security code fixes
• Implement and scale automated security testing to validate that secure coding best practices are being used
• Enable secure development practices through training

Skills

• Familiarity with common security libraries, security controls, and common security flaws
• Development or scripting experience and skills. Node.js and Java are preferred
• Experience with OWASP, static/dynamic analysis, and common security tools
• Experience identifying security issues through code review
• Experience working with developers
• Familiarity with securing applications built on cloud computing environments (AWS preferred)
• Understanding of authorization frameworks (OAuth and JWT)
• Experience working with source control (git, github, bitbucket etc.)
• Experience integrating application security functions into CI/CD processes

Why You'll Love It Here

• Play an instrumental role in reshaping one of the oldest industries in the world
• Competitive salary and unlimited PTO
• Meaningful early stage equity
• Generous healthcare benefits with medical, dental and vision coverage
• Monthly catered lunches and happy hours
• Company paid learning and development assistance
• Flexible working hours and ability to work remotely
• Opportunity to participate in a secondment program 
• Dependant care assistance plan 
• Company supported mentorship program
• Grow in a collaborative, respectful, and empathetic culture

#LI-Remote #LI-Hybrid