Senior Engineer, Application Security - Product Security

December 4

Apply Now
Logo of CrowdStrike

CrowdStrike

Next-Generation Endpoint Protection • Endpoint Detection and Response • Next Generation Anti-Virus • Managed Threat Hunting • Incident Response

Description

• Help protect CrowdStrike and its customers from advanced threats by securing applications. • Join engineering teams to influence design and capabilities of products. • Create and maintain threat models to drive security architecture reviews. • Review application source code for security defects. • Collaborate with developers to implement proven solutions.

Requirements

• Self-motivated to identify security defects and engage with engineering teams to find solutions • A deep understanding of how software products are created and shipped in Agile/DevOps like environments • Experience with threat model framework(s), especially using STRIDE • Proven experience in code review for apps built with Go (Golang), Python, Rust, or JavaScript (emphasis on browser-side) • A working knowledge of secure configuration of cloud-native and containerized apps in multiple Cloud environments (GCP, Azure, AWS) • Experience using and/or maintaining commercially available AppSec tools like SAST, DAST, IAST, and ASPM suites • A solid understanding of common software weaknesses that impact cloud and web applications (not just the OWASP Top 10) and demonstrable experience in application penetration testing • Examples of collaborating across technical teams: asking technical questions, challenging assumptions, getting or providing context for decisions, etc. • Demonstrable experience developing/maintaining automation for application security tasks and defect identification

Benefits

• Remote-first culture • Market leader in compensation and equity awards • Competitive vacation and flexible working arrangements • Comprehensive and inclusive health benefits • Physical and mental wellness programs • Paid parental leave, including adoption • A variety of professional development and mentorship opportunities • Offices with stocked kitchens when you need to fuel innovation and collaboration

Apply Now

Similar Jobs

December 4

Allstate

10,000+ employees

As a Security Governance Lead Consultant, you'll develop compliance programs to mitigate cybersecurity risks protecting customer information at Allstate.

December 4

Cybersecurity Engineer roles involve securing BECU’s systems and protecting member data across platforms. Join BECU for impactful contributions in a mission-driven organization.

Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or lior@remoterocketship.com