Security Engineer II
About The Position
Spotnana is seeking an Security Engineer II to join our global Security team. As an Security Engineer II focused on Application Security, you will be responsible for improving Spotnana’s security and privacy position across our platform. As a hands-on engineer, you will work closely with Spotnana Engineering and Product teams to expand our secure SDLC, own our API security and penetration testing processes, and advocate for best-practices across our codebase including incorporation of security reviews earlier in our development cycle. The ideal candidate has a strong engineering background and is passionate about working cross-functionally with R&D teams to deliver secure, scalable solutions while being able to describe the business value provided by reducing risks.
Requirements
- 3+ years of previous web and mobile application security assessment experience
- Experience securing Java-based, API -driven microservices deployed in a cloud environment
- Experience with React (JS) for frontend and Java for backend services
- Previous experience implementing secure SDLC practices, and automations such as SAST, DAST, RAST, IAST in at least medium scale software development organizations
- Ability to write code in one or more programming languages
Responsibilities
- Conduct application level security assessments (threat modeling, code reviews, penetration testing) of both internal tools and external Spotnana web and mobile applications
- Provide supporting guidance for bug-fixes on issues found through various channels (customer reported, internal testing, tools, external pen tests etc)
- Incorporate AI tools to accelerate our ability to detect and address application security vulnerabilities
- Develop API Security best practices
- Implement SAST, DAST, RAST, IAST and related tools to identify security bugs earlier in the release cycle
- Deliver training and awareness forR&D on security issues
- Be part of incident response team where application level context and triage is necessary to contain an issue
- Collaborate with security compliance functions to align technical controls with compliance requirements
Benefits
- Equity in the form of stock options
- Pre-tax and ROTH 401(k) options via Fidelity with up to a 4% company match
- Comprehensive benefit plans covering medical, dental, vision, life, and disability effective on your hire date. We cover 100% of your employee premiums and 85% of your eligible dependents
- Pre-tax flexible spending account options for health, dependent care, and commuter expenses
- Flexible PTO in addition to 10 company holidays and an end-of-year company shutdown
- Up to 26 weeks of Parental Leave
- Monthly cell phone/internet stipend
- IATAN travel membership
- pet insurance
- financial wellness tools
- Calm app access
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
