Senior Security Platform Engineer (Hybrid)

United States Digital Space LLC; San Francisco (CA); On-site; USD 202,000 - 230,000; Full time

Benefits offered by this job

Mental health, wellness & fitness

Career coaching

Inclusive family building benefits

Long-term retirement plans

In-office culinary options

Job summary

Asana in San Francisco seeks a Senior Software Engineer to join the Security Development team. You will build durable, secure-by-default platforms that empower teams to move quickly and safely.

With 4+ years of software experience, you will own preventative controls across cloud infrastructure, particularly AWS, and drive foundational security initiatives across the product lifecycle.

Qualifications

• 4+ years of professional software development experience.
• Background building platforms, libraries, or core infrastructure.
• Strong interest or experience in security engineering with preventative controls.
• Excellent communication across engineering teams and stakeholders.
• Curiosity about AI tools and emerging technologies to improve security.
• Proactive mindset for eliminating systemic risks.

Responsibilities

• Design, build, and maintain secure-by-default frameworks and platforms.
• Engineer core security services like access control and secrets management.
• Own the platform for vulnerability remediation and tooling.
• Partner with product and infra teams to implement foundational security controls.
• Advise on secure design choices across project lifecycles.
• Influence initiatives through design reviews and security trade-offs.

Skills

Security Engineering

AWS

CS Fundamentals

Communication Skills

Proactive Mindset

Curiosity about AI

Job description

Asana in San Francisco seeks a Senior Software Engineer to join the Security Development team. You will build durable, secure-by-default platforms that empower teams to move quickly and safely.

With 4+ years of software experience, you will own preventative controls across cloud infrastructure, particularly AWS, and drive foundational security initiatives across the product lifecycle.