Principal Application Security Engineer

📋 Description

• Work with engineering and data science to securely design products.
• Develop and maintain threat models for high-risk features.
• Set up regular vulnerability scans and remediation.
• Assess threat models for cloud-native infrastructures and apps.
• Identify security controls and provide cross-functional guidance.

🎯 Requirements

• 3+ years in application security or security engineering.
• IT/CS degree or equivalent knowledge.
• Experience in Java, Python or Ruby development.
• Knowledge of TLS, SAML and auth protocols.
• Experience with SAST/DAST and vulnerability scanners.
• Understanding SDLC, CI/CD and full-stack development.

🎁 Benefits

• Competitive base, bonus, and equity.
• Medical, dental, and vision coverage with HSA contributions.
• 401(k) with Upstart matching up to $15k per year.
• Employee Stock Purchase Plan (ESPP).
• Life and disability insurance.
• Generous holidays, vacation, and wellness reimbursements.