Senior/Staff Application Security Engineer

Crusoe; San Francisco (CA); Hybrid; USD 180,000 - 300,000; Full time

Job summary

An innovative company is seeking a Senior/Staff Application Security Engineer to enhance the security of its applications and digital infrastructure. This role involves collaborating with product and engineering teams to integrate security measures throughout the development lifecycle, conducting thorough security assessments, and implementing cutting-edge security tools. The ideal candidate will have extensive experience in Information Security, particularly in application security, and will play a pivotal role in fostering a culture of security awareness. Join a forward-thinking firm that values climate-friendly innovation and offers a hybrid work environment, competitive compensation, and a comprehensive benefits package.

Benefits

Hybrid work schedule

Restricted Stock Units

Health insurance options

Employer contributions to HSA

Paid Parental Leave

Paid life insurance

Pet-friendly offices

401(k) with 100% match

Generous paid time off

Tuition reimbursement

Qualifications

• 6+ years of experience in Information Security with a focus on application security.
• Familiarity with threat modeling and risk mitigation in various architectures.

Responsibilities

• Partner with teams to integrate security practices into the development lifecycle.
• Conduct design reviews, code reviews, and penetration testing.
• Educate and mentor team members on best security practices.

Skills

Information Security

Application Security

Threat Modeling

Vulnerability Risk Analysis

Secure Coding

Communication Skills

Job description

Crusoe Energy is on a mission to unlock value in stranded energy resources through the power of computation.

Take a look at what we do! - https://www.youtube.com/watch?v=Rlt8k71Quqw

We aim to align the long term interests of the climate with the future of global computing infrastructure. As data centers consume an exponentially growing power footprint to deliver technology to all connected devices, we are inspired by making sure that the energy meeting that demand is sourced in an environmentally responsible fashion. Crusoe co-locates mobile data centers with stranded energy resources, like flare gas and underloaded renewables, to deliver low-cost, carbon-negative distributed computing solutions. Crusoe Cloud is a managed cloud services platform powered by stranded energy that enables climate-friendly innovation in computationally intensive fields including artificial intelligence, graphics rendering and computational biology.

About This Role:

Crusoe Security & Compliance is hiring a Senior/Staff Application Security Engineer to play a critical role in ensuring the security and integrity of our applications and digital infrastructure. In this position, you will be responsible for leading the development and enforcement of security best practices, conducting security assessments and architecture reviews, and implementing state-of-the-art security tools and techniques. You will collaborate closely with development teams to integrate security measures into all phases of the software development lifecycle and proactively, and foster a culture of security awareness throughout the organization. Your expertise will directly contribute to the continuous improvement of our security posture, making our products safer and our customers' data more secure.

A Day In The Life:

• Partner with product and engineering teams to develop and integrate security practices into the development lifecycle

• Conduct design reviews, code reviews, threat modeling, penetration testing, and vulnerability risk analysis on product and feature development

• Establish secure coding requirements and lead manual security reviews

• Identify and implement security tools to test code and software for vulnerabilities

• Evaluate products to identify potential threats and vulnerabilities in user-facing flows

• Collaborate with product, engineering, and security teams to provide recommendations for solutions focused on reducing business risks

• Identify and maintain standards and procedures for the use of open-source software

• Educate, train, and mentor team members on best security practices

You Will Thrive In This Role If:

• 6+ years of experience in Information Security with a focus on application security / product security

• Familiarity in threat modeling, adept at identifying, evaluating, and mitigating potential threats and risks within various architectures

• Self-motivated, with good communication and writing skills

• Must be able to pass a background check

• Embody the Company values

Benefits:

• Hybrid work schedule

• Industry competitive pay

• Restricted Stock Units in a fast growing, well-funded technology company

• Health insurance package options that include HDHP and PPO, vision, and dental for you and your dependents

• Employer contributions to HSA accounts

• Paid Parental Leave

• Paid life insurance, short-term and long-term disability

• Teladoc

• Pet-friendly offices

• 401(k) with a 100% match up to 4% of salary

• Generous paid time off and holiday schedule

• Cell phone reimbursement

• Tuition reimbursement

• Subscription to the Calm app

• MetLife Legal

• Company paid commuter benefit; $50 per pay period

Compensation Range:

Compensation will be paid in the range of $180k - $300k per year. Restricted Stock Units are also included in all offers. Compensation to be determined by the applicant’s education, experience, knowledge, skills, and abilities, as well as internal equity and alignment with market data.

Crusoe Energy is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.