Enable job alerts via email!

Senior Application Security Engineer

EasyPost

United States

On-site

USD 125,000 - 170,000

Full time

4 days ago

Be an early applicant

Boost your interview chances

Create a job specific, tailored resume for higher success rate.

Job summary

A leading company in logistics seeks a Senior Application Security Engineer responsible for enhancing security within their ecosystem. The role involves designing security systems, collaborating on project integrity, and creating self-service resources for efficient developer engagement. Ideal candidates possess extensive experience in security design and efficient coding practices.

Benefits

Medical insurance

Paid maternity leave

401(k)

Tuition assistance

Disability insurance

Vision insurance

Child care support

Student loan assistance

Paid paternity leave

Pension plan

Qualifications

8+ years of related experience or Master's degree with 6+ years.
Proven experience securing large-scale web applications and APIs.
Ability to design simple, maintainable, scalable systems.

Responsibilities

Lead the design, building, and maintenance of security systems.
Collaborate to integrate security controls into project development.
Create and maintain security alerting infrastructure.

Skills

Python

Ruby

Rust

Security design reviews

Vulnerability assessments

Threat modeling

Education

Bachelor's degree in computer science

This range is provided by EasyPost. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$125,000.00/yr - $170,000.00/yr

Direct message the job poster from EasyPost

Sr. TA Manager at EasyPost (Engineering, Data, Dev Ops, Product)| Non Profit Board Member | Fittest Recruiter on Planet Earth | Jaguars Apologist |

Position Summary:

The Senior Application Security Engineer will play a critical role in maintaining and improving the security of EasyPost’s growing and evolving logistics ecosystem. Responsibilities will include identifying, planning, and completing high-impact security projects, reviewing new proposed product features, building new security systems and programs. The Senior Security Engineer will leverage their experience and creativity to protect millions of users, the company, and our partner organizations against both identified and emerging security risks.

Essential Duties and Responsibilities:

The essential functions include, but are not limited to the following:

o Lead the design, building and maintenance of security systems and infrastructure that support the organization's evolving business and security goals.

o Collaborate with other teams to integrate security and privacy controls and technology into the company’s overall planning and development process from project inception to project delivery.

o Build systems and programs that help security at EasyPost to scale efficiently in both breadth and depth of coverage.

o Embrace “shift-left” DevSecOps patterns, including infrastructure-as-code and Continuous Integration/Continuous Delivery design patterns that move security feedback to the earliest phases of product development and provide faster feedback to partner teams.

o Design and build key competitive security features within the product itself that will support continued business growth among security-conscious customers.

o Build and maintain security alerting infrastructure that delivers timely, relevant, and actionable alerts directly to internal staff, customers, and users.

o Create and maintain self-service documentation, training material, and knowledge base resources that help developers be more productive and write safer code.

o Work directly with M&A entities to integrate their products and improve the overall security posture of their existing development and support environments.

Minimum Education & Experience Qualifications:

o Bachelor's degree in computer science, management information systems, or related field.

o 8+ years of related experience, master’s degree and 6+ years of related experience, or equivalent related work experience.

o Comfortable writing production-ready code daily in at least two of the following languages: Python, Ruby, Go, or Rust.

o Ability to design systems that are simple to understand, maintainable, scalable, and resilient.

o Prior experience securing large-scale web applications and/or Application Programming Interfaces (APIs), including performing security design reviews, vulnerability assessments, and building testing strategies for logic flaws.

o The ability to understand and communicate concepts around threat modeling and risk management, including to both technical and non-technical stakeholders.

o Proven history of building strong partnerships with Engineering and Product teams to deliver world-class products and features.

o Working knowledge of several compliance and regulatory frameworks (SOC2, ISO 27001, SOX/ITGC, HIPAA, GDPR, CCPA, etc…)

o Experience in assessing risk and selecting key objectives during the vendor management lifecycle for software, hardware, cloud, and software-as-a-service vendors.

o Deep knowledge of how to build and maintain mixed computing environments (Linux, Windows, Mac OS, and mobile devices).

o Past experience with migrating applications and services to public cloud providers (AWS, GCP, Azure, etc…)

Seniority level

Seniority level
Mid-Senior level

Employment type

Employment type
Full-time

Job function

Job function
Supply Chain
Industries
Transportation, Logistics, Supply Chain and Storage

Referrals increase your chances of interviewing at EasyPost by 2x

Inferred from the description for this job

Medical insurance

Paid paternity leave

Pension plan

Tuition assistance

Disability insurance

Vision insurance

Child care support

Student loan assistance

Paid maternity leave

401(k)

Get notified when a new job is posted.

Senior Security Engineer, Application & Cloud

United States $150,000.00-$180,000.00 4 days ago

Senior Security Engineer, Application Security

United States $150,000.00-$200,000.00 1 week ago