Senior Software Engineer - Security

ZipRecruiter; New York (NY); Remote; USD 160,000 - 270,000; Full time

Job summary

A leading technology firm in New York is looking for a Senior Software Engineer specializing in security. The role involves building security tools, developing threat detection capabilities, and mentoring engineers. Candidates should have extensive experience in security engineering, cloud services, and vulnerability management. This position includes a competitive salary ranging from $160,805 to $270,000 per year and allows telecommuting from anywhere in the U.S.

Qualifications

• 4+ years of experience in software development or engineering with a focus on security.
• Master's degree may replace 4 years of experience.
• Experience with AWS cloud infrastructure setup, configuration, and programming.

Responsibilities

• Create security tooling and automation.
• Develop alerting and threat detection capabilities.
• Conduct company-wide security advisory sessions.

Skills

Vulnerability management

Infrastructure as Code (Terraform)

Secure coding practices

Ethical hacking

Threat modeling

Python programming

JavaScript programming

AWS cloud services administration

Penetration testing

Email security monitoring

Education

Bachelor’s degree in Computer Science or related field

Master's degree in Computer Science or related field

Job description

Job Description

Senior Software Engineer – Security (Foursquare Labs, Inc., New York, NY)

Build security tooling and automation using Infrastructure as Code and serverless frameworks. Develop alerting and threat detection capabilities in both corporate and production environments. Respond to security events, including isolating, mitigating, and investigating active threats. Directly contribute to Foursquare revenue by helping to close customers through direct conversations or via preparing sales staff with relevant security education and information. Provide technical expertise in all areas of cybersecurity, including AWS cloud security, architectural design, corporate security and asset management, email security, encryption and other cryptographic measures, authentication and authorization, anti-malware, intrusion detection and prevention, and human factors security.

Work with infrastructure and feature engineering teams to identify and mitigate risks to the business. Conduct company-wide security advisories and implement measures following international security standards and best practices. Implement strategic security improvements as organizational and policy initiatives. Drive adoption of security processes for both engineering and non-engineering teams. Maintain a risk assessment and reduction program by engaging in periodic testing. Use strong communication skills (written and verbal) to maintain and cultivate strong relationships with Privacy and Legal departments to maintain compliance with contractual and regulatory requirements.

Provide your expert opinion to leaders and executives in order to inform strategic decision making whenever security considerations are relevant. Advocate for the security culture of the organization, including collaborating with stakeholders across Infrastructure and Engineering teams. Mentor and cultivate the growth of engineers on the team and the wider organization and support their career paths at the company. Keep up to date with global cybersecurity threats and drive company initiatives to reduce risk based on the cyber threat landscape. Participate in on-call rotation duties. Position allows telecommuting from anywhere in the U.S. Salary: $160,805-270,000 per year.

Minimum Requirements:

Bachelor’s degree or U.S. equivalent in Computer Science, Computer Engineering, Information Technology, or a related field plus 4 years of professional experience as Software Developer, Software Engineer, or any occupation/position/job title involving security engineering or DevSecOps, with a focus on AWS and infrastructure security.

In lieu of a Bachelor's degree plus 4 years of experience, the employer will accept a Master's degree or U.S. equivalent in Computer Science, Computer Engineering, Information Technology, or related field, plus 2 years of professional experience as Software Developer, Software Engineer, or any occupation/position/job title involving security engineering or DevSecOps, with a focus on AWS and infrastructure security.

Must also have experience in the following:

• 2 years of professional experience implementing and ensuring compliance with industry best practices vulnerability management program and other enterprise-grade security controls, including regular triage of vulnerability reports, penetration testing findings, and vulnerability scanning results;
• 2 years of professional experience with Infrastructure as Code (Terraform);
• 2 years of professional experience with secure coding practices, ethical hacking, and threat modeling;
• 2 years of professional experience writing code in Python or JavaScript;
• 2 years of professional experience performing administration of AWS cloud services and performing AWS cloud infrastructure setup and configuration, automated testing and deployment;
• 2 years of professional experience proposing, designing, planning, and implementing strategic and tactical security improvements (including device management, and access management);
• 2 years of professional experience performing penetration testing and mitigation of real world attacks including DoS, XSS, CSRF, IDOR, dictionary attacks, and SQL injection;
• 2 years of professional experience monitoring email security (including DKIM, DMARC, and SPF, and phishing indicators).

Contact information and job code have been removed as they are not essential to the job description.

Foursquare is an equal opportunities employer and welcomes applications from diverse candidates.