Staff Application Security Engineer

March 13

Apply Now

Receive Emails with Similar Jobs

NerdWallet

WebsiteLinkedInAll Job Openings

NerdWallet is on a mission to help provide clarity for consumers and SMBs so they can make financial decisions with confidence. We work hard to cultivate an award-winning culture in which our Nerds can realize this mission, and we pride ourselves on the programs we’ve created to positively impact the lives of our consumers, our Nerds, and our wider world.

Personal Finance • Financial Advice

501 - 1000 employees

Founded 2009

📋 Description

• NerdWallet is looking for a Staff Application Security Engineer to enhance the Security Engineering team. • This role involves leading high-priority product security initiatives and securing NerdWallet’s software ecosystem. • You'll address security challenges proactively, safeguarding NerdWallet’s reputation and data. • Responsible for integrating security into the application development process and developing security tools. • Mentor junior engineers in security skills and help drive key security initiatives.

🎯 Requirements

• 8 + years of professional experience as a security engineer, software engineer, site reliability engineer, penetration tester/ red team member, or security consultant • 5+ years of experience working in Agile development, with expertise in technologies such as cloud environments (e.g., AWS), application security testing tools (e.g., SAST, DAST, SCA), infrastructure as code (e.g., Terraform), containers (e.g., Docker, Kubernetes), continuous integration (e.g., Jenkins, GitHub Actions), integration of security testing tools into CI pipelines, defect tracking (e.g., Jira), and source code management (e.g., GitHub) • Advanced knowledge of: Python, Typescript, and other languages (Go, PHP) • High-level understanding of: security weaknesses, exploits, attacks and mitigations • In-depth knowledge of common application and network protocols, cryptographic primitives, authentication and authorization protocols, as well as common security threats, including attack techniques, evasive techniques, and preventative and defensive methods • Experience leading or participating in Security Development Lifecycle Practices, Threat Modeling, Technical Design Review, and Security Code Review • Proven success as a collaborator with the ability to convey high-level security concepts to team members across the organization and technical and non-technical stakeholders at all levels

🏖️ Benefits

• Industry-leading medical, dental, and vision health care plans for employees and their dependents • Rejuvenation Policy – Vacation Time Off + 11 holidays + 4 Mental Health Days Off • New Parent Leave for employees with a newborn child or a child placed with them for adoption or foster care • Mental health support • Paid sabbatical for Nerds to recharge, gain knowledge and pursue their interests • Health and Dependent Care FSA and HSA Plan with monthly NerdWallet contribution • Monthly Wellness Stipend, Cell Phone Stipend, and Wifi Stipend • Work from home equipment stipend and co-working space subsidy • Nerd-led group initiatives – Employee Resource Groups for Parents, Diversity, and Inclusion, Women, LGBTQIA, and other communities • Hackathons and team events across all teams and departments • Company-wide events like NerdLove (employee appreciation) and our annual Charity Auction • Our Nerds love to make an impact by paying it forward – Take 8 hours of volunteer time off per quarter and donate to your favorite causes with a company match • 401K with company match • Be the first to test and benefit from our new financial products and tools • Financial wellness, guidance, and unlimited access to a Certified Financial Planner (CFP) through Northstar • Disability and Life Insurance with employer-paid premiums