
Security Engineer II
Posted 5 days ago

Posted 5 days ago
This is a fully remote position, open to applicants in United States.
• Perform security assessments at the application level, which includes threat modeling, code reviews, and penetration testing.
• Evaluate both internal tools as well as external web and mobile applications.
• Offer recommendations for resolving bugs identified through customer feedback, internal testing, tools, and external penetration testing.
• Utilize AI tools to enhance the identification and remediation of application security vulnerabilities.
• Create best practices for API security.
• Implement security tools such as SAST, DAST, RAST, IAST, and others to detect security flaws earlier in the development lifecycle.
• Provide training and raise awareness regarding security issues for Research and Development teams.
• Engage in incident response when application-level context and triage are essential.
• Collaborate with security compliance teams to ensure that technical controls meet compliance standards.
• Work in partnership with Engineering and Product teams to enhance the secure Software Development Life Cycle (SDLC).
• Oversee processes related to API security and penetration testing.
• Promote security best practices throughout the codebase and encourage earlier security reviews.
• A minimum of 3 years of experience in web and mobile application security assessments.
• Proven experience in securing Java-based, API-driven microservices deployed within a cloud environment.
• Familiarity with React (JS) for frontend development and Java for backend services.
• Previous experience in implementing secure SDLC practices and automation tools such as SAST, DAST, RAST, and IAST in medium to large-scale software development organizations.
• Proficiency in writing code in one or more programming languages.
• Must possess legal authorization to work in the United States.
• Must not require current or future employment sponsorship.
• Capable of participating in virtual interviews, face-to-face discussions, and coding evaluations.
• Equity in the form of stock options.
• Pre-tax and ROTH 401(k) options through Fidelity, with up to a 4% company match.
• Comprehensive medical, dental, vision, life, and disability insurance plans effective from the hire date.
• Full coverage of employee premiums and 85% coverage for eligible dependents.
• Pre-tax flexible spending accounts available for health, dependent care, and commuting expenses.
• Flexible Paid Time Off (PTO).
• Ten company holidays.
• Company-wide shutdown at the end of the year.
• Up to 26 weeks of Parental Leave.
• Monthly stipend for cell phone and internet expenses.
• IATAN travel membership.
• Pet insurance options.
• Financial wellness resources.
• Access to the Calm app.
• Annual performance bonus.
• Comprehensive benefits package.
Cypress Creek Renewables
Bluesight
CampusWorks, Inc.
Anovia
Get handpicked remote jobs straight to your inbox weekly.