Senior Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Report directly to the Manager of Secure Design.

• Conduct threat modeling for application designs and solutions while delivering security risk assessments.

• Offer technical expertise in software and network architecture encompassing infrastructure, applications, personnel, and processes.

• Work collaboratively with product managers, designers, and engineers to threat model and construct secure, resilient systems.

• Identify trade-offs in solutions and recommend effective designs that fulfill both functional and security requirements.

• Provide hands-on guidance for remediation to development teams.

• Promote an internal security culture through developer training and internal Capture The Flag (CTF) events.

• Guide software engineering teams on security best practices.

• Assist in overseeing the vulnerability management program.

• Help engineers comprehend the implications of security events and vulnerabilities.

• Develop security tooling and automation to enhance Product Security practices.

• Incorporate custom security tools into engineering workflows.

⛳️ Requirements

• Demonstrated experience in leading architectural modifications or complex cross-team initiatives to address security vulnerabilities.

• Strong ability to clearly articulate security topics and vulnerability categories, including the OWASP Top Ten.

• Capability to provide actionable guidance to product teams.

• Proven track record of collaborating with internal engineering teams to address security challenges across an entire technology stack.

• Proficient understanding of virtualized environments, containerization, and continuous integration and deployment.

• Over 3 years of experience advising software teams on secure architecture design (preferred).

• Experience in creating or evaluating threat models and developing malicious user, attacker, and abuse/misuse scenarios (preferred).

• Familiarity with hardware and software supply chain security (preferred).

• Knowledge of object-oriented and functional programming principles, especially in Go, JavaScript, Rust, or C (preferred).

🏝️ Benefits

• Reimbursement for relevant conferences, training, and educational opportunities.

• Access to over 10,000 courses via LinkedIn Learning.

• Employee Assistance Program.

• Local employee meetups.

• Flexible time-off policy.

• Eligibility for bonuses based on company and individual performance.

• Equity compensation, including equity grants upon hiring.

• Option to participate in the Employee Stock Purchase Program.