Senior Software Engineer, Security Development

Asana; San Francisco (CA); Hybrid; USD 202,000 - 230,000; Full time

Benefits offered by this job

Mental health benefits

Career coaching

Family building benefits

Long-term retirement plans

In-office culinary options

Job summary

Asana is seeking a Senior Software Engineer to join its Security Development team in San Francisco. You will build secure-by-default frameworks and platforms that prevent vulnerabilities at scale, empowering engineering teams with guardrails and preventative controls.

You’ll partner with product and infrastructure to secure cloud networking and compute infrastructure, influence design reviews, and help teams shift left on security while expanding our capabilities in AWS and related services.

Qualifications

• 4+ years of experience in full-time software development with large codebases.
• Background in building platforms, libraries, or core infrastructure.
• Strong interest or experience in security engineering and preventative controls.

Responsibilities

• Design, build, and maintain secure-by-default frameworks, libraries, and platforms to eliminate vulnerabilities.
• Engineer and improve core security services and IAM like access control and secrets management.
• Develop and own the vulnerability remediation platform and tooling for engineering teams.
• Partner with product/infrastructure to architect foundational security controls for cloud networking and compute infrastructure.
• Advise on securing projects at design, development, launch, and incident stages.
• Influence engineering initiatives through design reviews and security trade-off discussions.

Skills

Software engineering

Security engineering

Cloud AWS

Communication

Job description

We are dedicated to ensuring proactive elimination of entire classes of security risk by engineering the core libraries, platforms and frameworks that provide secure guardrails for all Asanas.

We are looking for a Senior Software Engineer to join our new Security Development team. This team is focused on building durable, secure-by-default solutions to protect Asana's infrastructure and product. Instead of acting as gatekeepers, we build guardrails that empower engineering teams to move quickly and safely. You will be responsible for engineering preventative controls at scale, focusing on building platforms and frameworks that eradicate systemic risks.

This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements.

What you’ll achieve:

• Design, build, and maintain secure-by-default frameworks, libraries, and platforms to eliminate entire classes of vulnerabilities.
• Engineer and improve core security services, including our access control frameworks, secrets management infrastructure, and AWS permissions systems.
• Develop and own the platform for vulnerability remediation, creating tooling that empowers engineering teams to address risks efficiently.
• Partner with product and infrastructure teams to architect and implement foundational security controls for Asana including cloud networking, and compute infrastructure.
• Partner with product teams to effectively offer recommendations for how to secure projects at all phases of implementation (design, development, launch, and/or incidents)
• Influence engineering initiatives through design reviews, communicating security principles, and helping teams make sound security trade-offs.

About you:

• 4+ years of experience in full-time professional software development, working with large codebases.
• Proven software engineering experience, with a background in building platforms, libraries, or core infrastructure.
• Strong interest or direct experience in security engineering, with a focus on building preventative controls.
• Expertise in programming and computer science fundamentals.
• Experience with cloud infrastructure and services, particularly AWS.
• Excellent communication skills for collaborating effectively with engineering teams across the organization.
• A proactive mindset geared towards identifying and eliminating systemic risks, not just individual bugs.
• Demonstrates curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making

What We’ll Offer

Our comprehensive compensation package plays a big part in how we recognize you for the impact you have on our path to achieving our mission. We believe that compensation should be reflective of the value you create relative to the market value of your role. To ensure pay is fair and not impacted by biases, we're committed to looking at market value which is why we check ourselves and conduct a yearly pay equity audit.

For this role, the estimated base salary range is between $202,000-$230,000. The actual base salary will vary based on various factors, including market and individual qualifications objectively assessed during the interview process. The listed range above is a guideline, and the base salary range for this role may be modified.

In addition to base salary, your compensation package may include additional components such as equity, sales incentive pay (for most sales roles), and benefits. If you're interviewing for this role, speak with your Talent Acquisition Partner to learn more about the total compensation and benefits for this role.

We strive to provide equitable and competitive benefits packages that support our employees worldwide and include:

• Mental health, wellness & fitness benefits
• Career coaching & support
• Inclusive family building benefits
• Long-term savings or retirement plans
• In-office culinary options to cater to your dietary preferences

These are just some of the benefits we offer, and benefits may vary based on role, country, and local regulations. If you're interviewing for this role, speak with your Talent Acquisition Partner to learn more about the total compensation and benefits for this role.

About Us

Asana is a leading platform for human + AI collaboration. Millions of teams around the world rely on Asana to achieve their most important goals, faster. Asana has been named to Fortune's Best Workplaces for 7+ years and recognized by Fast Company, Forbes, and Gartner for excellence in workplace culture and innovation. We offer an exceptional office-centric culture while adopting the best elements of hybrid models to ensure that every one of our global team members can work together effortlessly. With 13+ offices all over the world, we are always looking for individuals who care about building technology that drives positive change in the world and a culture where everyone feels that they belong.

Join Asana’s Talent Network

to stay up to date on job opportunities and life at Asana.