Security Engineer

Checkr•Denver, CO

3d•Hybrid

About The Position

Checkr’s mission is to build a fairer future by designing technology to create opportunities for all. We believe all candidates, regardless of who they are, should have a fair chance to work. Established in 2014 and valued at $3B, Checkr is using technology to bring hiring to the next level. Our People Trust Platform uses machine learning to help thousands of companies modernize their background check process and make hiring safer, more efficient, and more inclusive. Some of our customers include Uber, Instacart, Doordash, Netflix, Compass Group, and Adecco. A career with Checkr is an opportunity to work with some of the best and brightest minds, disrupt an industry for a better future, and give otherwise overlooked candidates access to employment. Checkr has been recognized in Forbes Best Startup Employers and is a top Y Combinator company by valuation. We are looking for a Security Engineer to join our Security team in a hybrid role that spans application security, security operations, and IT security. This position is perfect for someone looking to grow their security expertise across multiple domains while contributing to protecting our critical infrastructure and applications. What a typical week may look like at Checkr: Help implement and maintain security tools in CI/CD pipelines Participate in security design and code reviews Support vulnerability management and remediation efforts Support bug bounty program triage and coordination Monitor and triage security alerts from various security tools Maintain security monitoring dashboards Configure SSO for applications Support identity and access management initiatives Assist with endpoint security management

Requirements

2-3+ years of security experience with exposure to application security
Programming knowledge in at least one language (Ruby, JavaScript, Go, Python preferred)
Understanding of web application security fundamentals and common vulnerabilities
Familiarity with security tools such as vulnerability scanners, or SAST/DAST tools
Strong communication skills and ability to work collaboratively with engineering teams
Problem-solving mindset with attention to detail
Willingness to learn and grow across multiple security domains

Nice To Haves

Experience with SSO solutions (Okta, Auth0, etc.)
Knowledge of compliance frameworks (SOC 2, ISO 27001)
Security certifications (Security+, CISSP, etc.)
Experience with DevSecOps practices, terraform

Responsibilities

Help implement and maintain security tools in CI/CD pipelines
Participate in security design and code reviews
Support vulnerability management and remediation efforts
Support bug bounty program triage and coordination
Monitor and triage security alerts from various security tools
Maintain security monitoring dashboards
Configure SSO for applications
Support identity and access management initiatives
Assist with endpoint security management

Benefits

A fast-paced and collaborative environment
Learning and development allowance
Competitive compensation and opportunity for advancement
100% medical, dental, and vision coverage
Up to $25K reimbursement for fertility, adoption, and parental planning services
Flexible PTO policy
Monthly wellness stipend

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume