Staff+ Application Security Engineer

$200,000 - $300,000/Yr

Verkada - San Mateo, CA

Full-time - Senior

San Mateo, CA

1,001-5,000 employees

Publishing Industries

About the position

The Staff Application Security Engineer at Verkada plays a crucial role in integrating security throughout the software development lifecycle. This position involves collaborating with engineering and product teams to enhance product security, conducting architecture analysis, and managing a bug bounty program. The engineer will also be responsible for promoting security best practices and sharing knowledge across teams, ultimately contributing to the safety and security of Verkada's innovative cloud-based solutions.

Responsibilities

• Facilitate the security baked into our applications throughout the software development lifecycle
• Evangelize software security best practices through training and information sharing
• Partner closely with engineering and product teams to improve the security of Verkada's products and exceed customers' expectations
• Explore innovative solutions to enable Verkada business instead of 'Security says No'
• Collaborate with other engineering leaders to define, communicate, and execute on goals, priorities and process
• Set up security tooling and secure defaults to ensure software security best practices
• Perform architecture analysis, threat modeling and technical design reviews of sensitive features and infrastructure
• Create and operate a bug bounty program
• Triage and recommend solutions for security bugs from tools, third party assessments and bug bounties
• Collaborate with the CISO and security team to grow the broader Verkada security program
• Share your security experience with other teams internally and externally via security conferences and blogs
• Help your peer engineers grow their own security reasoning and knowledge

Requirements

• Bachelor of Science in Computer Science degree or equivalent
• Strong experience with AWS, GCP or other cloud service provider
• 7 - 10+ years of experience as a security engineer, software engineer, site reliability engineer, or security consultant
• Understanding of security weaknesses, exploits, attacks and mitigations
• Experience and enthusiasm for learning about new security products, features, and strategies
• Coding ability in Python/Go for production code, security peer review, and automation scripts
• Excellent collaborative skills
• Outstanding written and verbal communication
• Experience with Security Development Lifecycle, Threat Modeling, Architecture Analysis, Technical Design Review, Security Code Review, Open Policy Agent, SIEM

Benefits

• Generous company paid medical, dental & vision insurance coverage
• Unlimited paid time off & 11 companywide paid holidays
• Wellness allowance
• Commuter benefits
• Healthy lunches and dinners provided daily
• Generous paid parental leave policy & fertility benefits