Staff Application Security Engineer

About the role

Upside is transforming the landscape of physical retail by leveraging digital commerce analytics to enhance everyday transactions. We are on the lookout for a seasoned security professional to join our Information Office. This role will focus on strengthening our application security framework while collaborating closely with our engineering teams to ensure the highest standards of security are met.

Key facts

What you'll do

• Design and implement innovative security solutions aimed at addressing application vulnerabilities, utilizing advanced AI tools to enhance effectiveness.
• Conduct Static Application Security Testing (SAST) and Software Composition Analysis (SCA), working in tandem with developers to remediate identified security flaws.
• Engage in threat modeling exercises and create comprehensive risk assessments in collaboration with technical teams to identify potential security threats.
• Provide strategic guidance to leadership regarding security architecture and design standards to ensure robust security practices are integrated into development processes.
• Deliver training sessions for engineering teams focused on secure coding practices and effective vulnerability management techniques.
• Participate actively in penetration testing initiatives and oversee the management of bug bounty programs to identify and mitigate security risks.
• Oversee the management of AWS Control Tower and Identity and Access Management (IAM) provisioning to maintain secure cloud environments.
• Stay informed about the latest trends in the security industry and actively participate in the broader security community to share knowledge and best practices.

Requirements

• A minimum of 6 years of experience in product or application security, with a strong emphasis on Python code review.
• Demonstrated ability to design, implement, and deliver effective vulnerability management solutions tailored to organizational needs.
• In-depth knowledge of AWS security architecture, particularly with services such as Lambda and AWS Control Tower.
• Hands-on experience with the integration and application of AI technologies in security practices.
• Outstanding interpersonal skills and a strong commitment to customer service, facilitating effective collaboration across teams.
• A Bachelor's degree in Computer Science, Engineering, or a related field is highly preferred.

Nice to have

• Familiarity with security frameworks and compliance standards such as OWASP, NIST, or ISO 27001.
• Experience with container security and orchestration tools like Docker and Kubernetes.
• Knowledge of additional programming languages beyond Python, such as Java or JavaScript.

Skills & tools

• Proficient in using the GitHub Suite, including Advanced Security, Actions, and Copilot for streamlined development processes.
• Strong programming skills in Python, with the ability to write secure and efficient code.
• Experience with Infrastructure as Code (IaC) tools like Terraform for managing cloud infrastructure.
• Proficient in AWS services, including Lambda, DynamoDB, S3, SNS, SQS, IAM, and VPCs, to ensure secure cloud architecture.
• Familiarity with AI tools such as ChatGPT to enhance security practices and automate processes.
• Experience with data warehousing solutions like Snowflake and proficiency in SQL for data management and analysis.

Practical notes

• We offer a comprehensive benefits package that includes medical, dental, and vision coverage starting from day one, along with a 401(k) plan, equity options, parental leave, and wellness programs.
• Employees enjoy unlimited paid time off (PTO), 10 federal holidays, and a company-wide winter break to promote work-life balance.
• A learning and development stipend is provided, along with lunch reimbursement for in-office days to support continuous growth.
• If you require any disability accommodations during the hiring process, please reach out to accommodations@upside.com for assistance.
• Please note that this is an internal search; submissions from agencies will not be accepted.

About the company

Earn every time you shop gas, grocery, or food with Upside's free top-rated app. Get cash back on everyday necessities, making your purchases more rewarding. Download and start earning today!