Senior Security Engineer

jobr.pro; Town of Greece (NY); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Private Medical & Life Insurance

Online mental health platform

Online training platform

Pension Plan

In-house gym

Cafeteria with snacks

Job summary

efood is seeking a Senior Security Engineer to join our Security team, collaborating with product, infrastructure and engineering to embed security into our platform. You will work with Backend, Mobile and DevOps to deliver resilient, high-quality experiences.

You will analyze designs, review code for security, drive threat modeling, manage vulnerabilities, and help scale our SSDLC and bug bounty programs as our engineering organization grows.

Qualifications

• 4+ years in information security
• Deep understanding of web and API security (OWASP Top 10) and securing distributed systems
• Strong knowledge of network and application security, cryptographic primitives and authentication
• Extensive experience securing AWS architectures and IaC
• Proficient in code review and development in Go, JavaScript, and Python
• Expert in threat modeling and guiding engineering teams
• Experience integrating security into development and CI/CD
• Strong analytical skills and sense of urgency
• Team player with excellent communication
• Willingness to learn and try new things

Responsibilities

• Analyze designs and infrastructure to identify security issues and countermeasures
• Conduct security-focused code reviews of applications and services to identify vulnerabilities
• Engineer and implement automated security controls and reusable libraries
• Drive security architecture assessments and perform threat modeling
• Own the vulnerability management process from bug bounty triage to remediation
• Propose viable solutions to fix security problems and drive them
• Scale and enhance SSDLC and bug bounty programs

Skills

OWASP Top 10

Distributed systems security

Network security

Authentication mechanisms

AWS architectures

Infrastructure as code security

Go

JavaScript

Python

Threat modeling

CI/CD security

Security reviews

Communication

Education

MSc in Information Security

Tools

AWS

Kubernetes

CI/CD tooling

Job description

Job Description

We are in the unique position to experience new and interesting situations that many companies have never seen before. We bake challenges by using agile methodologies, top line tools and of course always working with the best of teams.

This is a chance to be part of a rapidly growing team in a company that is changing the online delivery landscape, and be able to influence, execute and see the impact of your work at the end of the day.

You’ll join our Security team, working closely with product, infrastructure, and engineering teammates to bake security into the core of our platform. As a Senior Security Engineer, you’ll collaborate closely with developers and system architects to address complex security challenges and drive tech OKRs. You’ll work alongside Backend, Mobile, and DevOps counterparts to ensure a seamless, high-quality, and resilient experience across all platforms. If you’re ready to protect and shape the future of our product, we’d love to hear from you!

What you’ll do:

• As a skilled Security Engineer, you will analyze software designs, implementations and the infrastructure to identify security issues and design countermeasures
• Conduct security-centered code reviews of new and legacy applications and services to identify security vulnerabilities
• Engineer and implement automated security controls and reusable libraries to make the secure path the easy path for developers.
• Drive security architecture assessments and perform threat modeling to ensure resilient protection of new application and cloud service deployments.
• Own the vulnerability management process, from triaging bug bounty submissions to driving remediation efforts with engineering teams.
• Propose viable, informed solutions to fix security problems and drive them
• Scale and enhance SSDLC and bug bounty programs to align with the needs of a rapidly growing engineering organization.

Life @efood:

At efood, we constantly have chances to raise the bar, improving, innovating, and challenging ourselves to grow!

We take ownership of what we do, embracing challenges, and making things happen!

We move with pace to deliver value fast, which keeps us ahead, always balancing speed with quality!

We stay humble as we grow and dive deep in situations, asking questions & exploring beyond the surface to get the best solutions!

We bring good vibes by lifting each other up, focusing on what’s possible, and being the kind of teammate everyone wants on their side!

We’re a fast-growing, dynamic team where every efooder has the opportunity to shine, grow, and be part of something exciting.

Hungry enough to join us?

Qualifications

• At least 4 years of experience in the information security field
• You have a deep understanding of web and API security principles (OWASP Top 10) and have experience securing distributed systems
• Strong understanding of network and application security, cryptographic primitives and authentication mechanisms
• You have extensive experience securing modern AWS architectures and developing secure infrastructure-as-code
• You are proficient in code review and development in languages like Go, JavaScript, and Python.
• You are an expert in leading threat modeling sessions and providing actionable guidance to engineering teams.
• You have experience with integrating and automating security measures into development and CI/CD processes and you can support our infrastructure team to provide a secure environment
• Strong analytical skills and a strong sense of urgency and ownership in your work
• A strong team player attitude with excellent communication skills
• Excited to learn & try out new things

Nice to have:

• MSc in Information Security or other related field
• Mobile application security
• Holding the following or similar certifications:
  • AWS Certified Security - Specialty
  • Certified Kubernetes Security Specialist (CKS)
  • Other certifications, such as OSCP, OSWE, CEH, CISSP
• Experience working with PCI-DSS
• Familiarity with Zero Trust Architecture

Additional Information

• We recognize good work and we want our people to feel appreciated! That’s why we offer an attractive remuneration package for what you bring in!
• We share a passion for food, so you will certainly appreciate the ticket restaurant card to spend in restaurants and/or food supplies. We are efooders after all!
• We take care of you with Private Medical & Life Insurance from day #1 to keep you healthy and safe!
• We prioritize your mental health and offer round-the-clock access to an online mental health platform. You can schedule unlimited therapy sessions with certified psychologists and coaching sessions with experienced coaches.
• We want you to grow with us! And to help you keep improving, we provide you access to our online training platform where you can study topics for your personal and professional growth!
• Are you a cappuccino lover? Do you desperately want a cookie? Our inhouse cafeteria got you covered!
• If you want to stay in shape, our in-house gym awaits you fully equipped!
• We are passionate about exploring, growing & learning and our Global Mobility plan is created to help our people find their purpose around the world!
• Saving for the future? We’ve got your back! Our Pension Plan helps you invest in tomorrow while you enjoy today!
• Free efood pro Subscription: Perks of the job! Enjoy a complimentary efood pro subscription for free deliveries and exclusive discounts on your favorite meals and groceries.
• We support your growing family and we offer a childcare allowance for each individual child

At efood, your success is defined by both results and behaviors. We hire for excellence in craft and for the Leadership Principles that shape how we think, decide, and collaborate. What you achieve matters and how you achieve it defines us. Together, they move the business forward and deliver great experiences.

Learn more about our Leadership Principles here.

efood collects and processes personal data in accordance with applicable data protection laws. If you are a European Job Applicant see the privacy notice for further details.