Lead App Security Engineer for GovTech

Binti; Oakland (CA); Presencial; USD 240.000 - 330.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Above-market compensation

Excellent health insurance

Flexible vacations

Paid holidays

Parental leave

Learning & development stipend

Office setup reimbursement

Internet reimbursement

Jury duty pay

Descripción de la vacante

Binti, a San Francisco–based software company serving government agencies, seeks a Principal Security Engineer focused on applications to secure our platforms. You will lead security assessments, threat modeling, and secure coding standards while guiding engineers in implementing best practices across the product.

You will mentor teams, drive security automation in the development lifecycle and cloud hosting, and help ensure SOC 2 Type II and HIPAA readiness.

Formación

• Experience as an Application Security Engineer or similar role.
• Strong background in full-stack development, cloud computing, scalable architecture.
• Proficiency in one or more OOP languages (Ruby, Python, Java, etc).
• Knowledge of web application security principles and best practices.

Responsabilidades

• Conduct security assessments, code audits, penetration testing, and threat modeling.
• Set direction and prioritize security work across teams and leadership.
• Respond to security incidents and provide post-event analyses.
• Improve security architecture and automate security in the SDLC and cloud hosting.
• Lead secure coding standards across the development lifecycle.
• Stay updated on threats, mentor teams, and promote a security-aware culture.
• Represent the security team to other teams and leadership.

Conocimientos

OOP languages

Full-stack development

Cloud computing

Security posture

Mentorship

Automation

govtech / FedRamp

Herramientas

SIEM

Cloud security tools

Descripción del empleo

Binti, a San Francisco–based software company serving government agencies, seeks a Principal Security Engineer focused on applications to secure our platforms. You will lead security assessments, threat modeling, and secure coding standards while guiding engineers in implementing best practices across the product.

You will mentor teams, drive security automation in the development lifecycle and cloud hosting, and help ensure SOC 2 Type II and HIPAA readiness.