Senior Security Platform Engineer (Hybrid)

Asana; San Francisco (CA); Hybrid; USD 202,000 - 230,000; Full time

Benefits offered by this job

Mental health, wellness & fitness bene

Career coaching & support

Inclusive family building benefits

Long-term savings or retirement plans

In-office culinary options

Job summary

Asana, a leading platform for human + AI collaboration, seeks a Senior Software Engineer to join our Security Development team in San Francisco. You will help build durable guardrails that empower engineering teams to move quickly while eradicating systemic risks.

You’ll design secure-by-default platforms, strengthen access control and secrets management, and own tooling to remediate vulnerabilities at scale.

Qualifications

• 4+ years of experience in full-time software development.
• Experience building platforms, libraries, or core infrastructure.
• Interest or experience in security engineering and preventative controls.
• Strong fundamentals in programming and CS.

Responsibilities

• Design, build, and maintain secure-by-default frameworks, libraries, and platforms to eliminate vulnerabilities.
• Engineer and improve core security services, including access control and secrets management.
• Develop and own the vulnerability remediation platform and tooling.
• Partner with product and infrastructure teams to implement foundational security controls.
• Advise on securing projects across design, development, launch, and incidents.
• Influence engineering initiatives through design reviews and security trade-offs.

Skills

Security engineering

AWS

Platform development

Communication

Tools

Access control frameworks

Job description

Asana, a leading platform for human + AI collaboration, seeks a Senior Software Engineer to join our Security Development team in San Francisco. You will help build durable guardrails that empower engineering teams to move quickly while eradicating systemic risks.

You’ll design secure-by-default platforms, strengthen access control and secrets management, and own tooling to remediate vulnerabilities at scale.