Klaviyo - Boston, MA
posted 4 months ago
At Klaviyo, we value the unique backgrounds, experiences, and perspectives each Klaviyo (we call ourselves Klaviyos) brings to our workplace each and every day. We believe everyone deserves a fair shot at success and appreciate the experiences each person brings beyond the traditional job requirements. If you're a close but not exact match with the description, we hope you'll still consider applying. Want to learn more about life at Klaviyo? Visit careers.klaviyo.com to see how we empower creators to own their own destiny. Klaviyo is looking for an Application Security Engineer to lead our Security Operations AppSec team as we grow our function to support deploying secure applications across our software ecosystem. The Application Security Engineering Manager will collaborate with teams across Klaviyo to develop secure software patterns and apply them to shared libraries enabling development and platform teams to focus on product and functionality. Security Operations Application Security Engineers technical responsibilities include: Develop a secure code architecture and patterns that enable Klaviyo to efficiently and securely perform transactions on the platform. Identify legacy patterns of data access where consolidation of functionality into centralized libraries simplifying code maintenance and modifications to core activities. Understand core 3rd party solutions such as Django and React; take advantage of new security features within our code base when they are released. Work side by side with other Security Operations team members to assist with Detection and Response, Offensive Security, and Infrastructure hardening. Hands on implementation of architecture designs and library development within our code base. Leverage existing tooling to their fullest ensuring the teams take full advantage of our investments. Security Operations Application Security Engineers managerial responsibilities include: Creating roadmaps for Application Security goals that align with reducing risk across the platform. OWASP top 10, Secure Code Best Practices, CIS Benchmarks are all used to measure success within Klaviyo. Mentoring Application Security Engineers, personal growth, technical growth, and career growth. Ensuring team members and yourself have a healthy work / life balance by managing individual workloads. Tracking team performance and providing continuous feedback and periodic employee reviews. Identifying tooling required to execute efficiently and enable all developers to practice secure code best practices; internally developed and commercial products. If you are an experienced Application Security Engineer with prior team leadership and/or managed other Application Security Engineers, have a passion for mentoring and sharing your knowledge to team members and experience with large scale web applications that process billions of transactions across multiple technologies, this may be the role for you.