Staff Security Engineer

You will be a member of the Branch Security Team, reporting to the Head of Security and working within engineering teams, a champion of secure application and service design and implementation that powers mobile experiences for a majority of top companies around the world. Today, we are powering over 10+ billion API transactions a day and growing rapidly. You will be a trusted subject matter expert, advisor, and mentor for software developers, engineers, architects, and project managers and will impact how we build security into our platform. You will have the opportunity to work on a number of different security projects spanning multiple teams, services, and disciplines. This role is supported directly by the Head of Security and is directly tied to the growth and success of our Security Team and Security Program.

As a Staff Security Engineer, you'll get to:

• Represent Engineering IC leadership on top-level security initiatives and projects.
• Operate across all Engineering teams as a security subject matter expert and mentor.
• Provide guidance and pragmatic solutions for security design, implementation, and operation of Branch platforms and services.
• Develop and deliver security controls and methods for vulnerability detection, response, and remediation.
• Develop and deliver security training programs and materials that strengthens our ability to build security into the fabric of Branch platforms and services.
• Analyze, assess, and respond to threats and vulnerabilities and interact directly with our security bounty program.
• Above all else: Be a leading contributor to the continuous improvement of our Information Security Team and Information Security Program.

You'll be a good fit if you have:

• Strong communication skills and a collaborative work style.
• Confidence working with empowering and supportive leadership that values autonomy and individual decision making.
• Experience working with modern cloud based microservice architectures or cloud security (e.g. AWS).
• Experience with vulnerability assessment, penetration testing, source code review, and especially effective vulnerability remediation.
• Ability to read and understand design specifications and source code to determine the presence and nature of threats and vulnerabilities.
• Ability to rapidly prototype tools and methods to improve security testing, validation, remediation, and reporting.
• Experience or familiarity with key areas of our technology stack:
  • Cloud: AWS
  • CI/CD, Orchestration, Build, Automation: Kubernetes, Github-actions, Gradle
  • Programming Languages: Go, Kotlin, Java, Python, Bazel, Airflow, Javascript, Typescript, React
• At least 7+ years of relevant work experience.

In accordance with applicable law, the following represents a reasonable estimated compensation range for this role: the estimated pay range for this role, if based in Seattle, Washington, is $206,300 - $263,000

Please note that this information is provided for those hired in Seattle, WA only. Compensation for candidates outside of Seattle, WA, will be based on the candidate's specific work location.

Actual compensation will be determined based on skills, experience, and geographic location and may be more or less than the amount shown above.