Senior Security Engineer, Application Security

Key Skills

Aartificial intelligence, Continuous Integration & Continuous Delivery - CI/CD, Effective communication skills, GoLang, Java Programming, Machine learning techniques, Planning and organization, Python Programming

Job Description

Who we are

We are looking for a versatile senior application security engineer who is passionate about securing emerging technology. Our ideal candidate is motivated by helping to reduce risk while enabling the business to move quickly and safely. You will bring both technical acumen and a developer mindset to your work. As a key member of the Security Engineering team, you will be responsible for securing the Attentive’s platform (we work in AWS) and customer-facing products (we build microservices primarily in Java). You will be the primary point of contact for our AI/ML teams, providing hands-on support to ensure they can develop and ship features at full speed without compromising on security.

Approach

At Attentive, we believe interacting with our security team and security controls should feel delightful and straightforward. Thus, the person in this role needs:

• A creative and solution-oriented attitude. You’ll leverage this when finding solutions that work for all stakeholders.
• The patience to fully understand our partner teams’ processes and goals. You’ll need this so you can implement thoughtful, complementary security solutions.
• The ability to build automation into security processes. You’ll need this to reduce the security burden on our partner teams and support extremely rapid growth across the company.

Why Attentive needs you

• Lead with a focus on automation, security-by-design and scale
• Ensure Attentive’s AI offerings are trusted and safe for customers to use
• Perform secure design reviews and testing for new systems and product features
• Build and operate tools in partnership with other Security and Engineering teams to secure our code and underlying systems from development to delivery
• Provide hands-on support to engineers to deploy security solutions, harden services and remediate vulnerabilities
• Perform ongoing threat modeling to protect and secure our product and infrastructure
• Provides continuous security guidance to developers across engineering
• Take on additional responsibilities as necessary to uphold and enhance security across the organization

About you

• 5+ years of experience in Security with a focus in application security
• Comfortable coding and reviewing code with one of these languages: Java, Python, Golang
• Good understanding of modern web frameworks and remediating common vulnerabilities in code (i.e. Burp Suite, Semgrep)
• Experience automating and deploying application security tools in the CI/CD pipeline
• Strong interest in machine learning and security engineering: you should be comfortable discussing threats that apply to machine learning (e.g. training data leakage, prompt injection, multi-tenancy workloads, membership inference, etc.)
• Strong ability to work both independently and collaboratively across the organization to achieve outcomes
• Skilled at communicating complex technical ideas, risks and threats to non-technical audiences

You'll get competitive perks and benefits, from health & wellness to equity, to help you bring your best self to work.

For US based applicants:

• The US base salary range for this full-time position is $155,000 - $225,000 annually + equity + benefits
• Our salary ranges are determined by role, level and location