Senior Security Platform Engineer: Preventative Controls

Asana; San Francisco (CA); Hybrid; USD 202,000 - 230,000; Full time

Benefits offered by this job

Mental health benefits

Career coaching

Family building benefits

Long-term retirement plans

In-office culinary options

Job summary

Asana is seeking a Senior Software Engineer to join its Security Development team in San Francisco. You will build secure-by-default frameworks and platforms that prevent vulnerabilities at scale, empowering engineering teams with guardrails and preventative controls.

You’ll partner with product and infrastructure to secure cloud networking and compute infrastructure, influence design reviews, and help teams shift left on security while expanding our capabilities in AWS and related services.

Qualifications

• 4+ years of experience in full-time software development with large codebases.
• Background in building platforms, libraries, or core infrastructure.
• Strong interest or experience in security engineering and preventative controls.

Responsibilities

• Design, build, and maintain secure-by-default frameworks, libraries, and platforms to eliminate vulnerabilities.
• Engineer and improve core security services and IAM like access control and secrets management.
• Develop and own the vulnerability remediation platform and tooling for engineering teams.
• Partner with product/infrastructure to architect foundational security controls for cloud networking and compute infrastructure.
• Advise on securing projects at design, development, launch, and incident stages.
• Influence engineering initiatives through design reviews and security trade-off discussions.

Skills

Software engineering

Security engineering

Cloud AWS

Communication

Job description

Asana is seeking a Senior Software Engineer to join its Security Development team in San Francisco. You will build secure-by-default frameworks and platforms that prevent vulnerabilities at scale, empowering engineering teams with guardrails and preventative controls.

You’ll partner with product and infrastructure to secure cloud networking and compute infrastructure, influence design reviews, and help teams shift left on security while expanding our capabilities in AWS and related services.