[Hiring] Security Engineer II @Spotnana

Role Description

Spotnana is seeking a Security Engineer II to join our global Security team. As a Security Engineer II focused on Application Security, you will be responsible for improving Spotnana’s security and privacy position across our platform. As a hands-on engineer, you will work closely with Spotnana Engineering and Product teams to:

• Expand our secure SDLC
• Own our API security and penetration testing processes
• Advocate for best-practices across our codebase, including incorporation of security reviews earlier in our development cycle

The ideal candidate has a strong engineering background and is passionate about working cross-functionally with R&D teams to deliver secure, scalable solutions while being able to describe the business value provided by reducing risks.

Qualifications

• 3+ years of previous web and mobile application security assessment experience
• Experience securing Java-based, API-driven microservices deployed in a cloud environment
• Experience with React (JS) for frontend and Java for backend services
• Previous experience implementing secure SDLC practices and automations such as SAST, DAST, RAST, IAST in at least medium scale software development organizations
• Ability to write code in one or more programming languages

Requirements

• Conduct application level security assessments (threat modeling, code reviews, penetration testing) of both internal tools and external Spotnana web and mobile applications
• Provide supporting guidance for bug-fixes on issues found through various channels (customer reported, internal testing, tools, external pen tests etc)
• Incorporate AI tools to accelerate our ability to detect and address application security vulnerabilities
• Develop API Security best practices
• Implement SAST, DAST, RAST, IAST and related tools to identify security bugs earlier in the release cycle
• Deliver training and awareness for R&D on security issues
• Be part of incident response team where application level context and triage is necessary to contain an issue
• Collaborate with security compliance functions to align technical controls with compliance requirements

Benefits

• Equity in the form of stock options, which provides partial ownership in the company
• Pre-tax and ROTH 401(k) options via Fidelity with up to a 4% company match
• Comprehensive benefit plans covering medical, dental, vision, life, and disability effective on your hire date
• Pre-tax flexible spending account options for health, dependent care, and commuter expenses
• Flexible PTO in addition to 10 company holidays and an end-of-year company shutdown
• Up to 26 weeks of Parental Leave
• Monthly cell phone/internet stipend
• Extra perks: IATAN travel membership, pet insurance, financial wellness tools, Calm app access, and more