Senior Product Security Engineer

Description

The company makes it possible for people to pay over time with clear terms, no hidden fees and no surprises.

Information security is treated as essential to the company's success. The security team works to reduce risk while giving the right people secure access to information.

The role suits someone who has built and designed software as part of a larger team. You will work with product and engineering teams to shape product requirements, design and implementation so the products are more secure.

Responsibilities

• Work with product teams so security is considered in every stage of product development.
• Run threat modeling and architecture reviews so threats are identified, recorded and addressed.
• Read and analyze product source code to find security vulnerabilities and recommend secure approaches.
• Automate processes where it makes sense.
• Spot new types of vulnerabilities and build solutions before they become problems.
• Help product teams write security-focused test cases that enforce security requirements.
• Advise product teams early on business security requirements.
• Break large cross-team projects into individual tasks, manage their scope and drive them to completion.

Requirements

• Strong understanding of web application architecture and design principles.
• Experience building cloud-based services with modern development and delivery methods. Python, Kotlin, Java, AWS and Azure experience is preferred.
• Familiarity with common security flaws and how to fix them, as documented by OWASP, SANS and similar bodies.
• Experience with PCI or other regulated environments.
• Experience threat modeling complex, distributed products using standard methodologies.
• Experience with standard authentication mechanisms, including SAML and OAuth2.
• Understanding of continuous integration and continuous deployment processes and tools.
• BS in a related field or equivalent experience required. MS in a related field or equivalent experience is a plus.
• Base pay grade N and equity grade 9.
• New hires usually start at the bottom of the pay range. Pay is based on factors such as location, experience and job-related skills.
• Base pay is part of total compensation, which may include equity, monthly stipends for health, wellness and tech spending, and benefits.
• USA base pay range in CA, WA, NY, NJ and CT: $195,000 to $255,000 USD per year.
• USA base pay range in all other U.S. states: $173,000 to $233,000 USD per year.

Conditions

Remote role. Most positions can be done from almost anywhere in the country of employment, though some require occasional in-person work at an office and a few are office-based.

All new hires are invited to an in-person onboarding experience.

The company welcomes applicants from all backgrounds and provides accommodations in the interview process on request.

For positions based in San Francisco or Los Angeles, qualified applicants with arrest and conviction records are considered, as required by law.

Benefits

• Health coverage at no cost, with 100% of premiums covered for employees and their dependents.
• Monthly stipends for tech setup and for health and wellness options.
• Flexible time off and generous holidays.
• Employee stock purchase plan (ESPP) to buy company stock at a discount.