Application Security Engineer Tradeshift
San Francisco, CA

Job Description

Have you ever worked for a company that actually wanted you to bring your whole self to work every single day?

About Tradeshift

Tradeshift is a unicorn in the fintech industry. We are disrupting a typically stagnant environment by connecting companies of all sizes and providing them with the platform and network needed to create value from old processes like procurement, invoicing, payments, and workflow. We recognize that business is both messy and social - two revelations that have driven the development of Tradeshift, a platform for all your business interactions.

Team

Our team believes in an integrated approach to application security, and that prevention is better than a cure. We also believe that communication skills and the ability to help others can amplify the impact of an engineer 10x. We take security very seriously and work very hard to include it throughout our software lifecycle from the design process all the way through how we operate the platform.

Role

You are a security evangelist across all of Tradeshift, training other developers to help them build more secure products. You'll consult with teams on secure architecture design, and put our security measures to the test to ensure we are performing best practices in the best interest of our Shifters and clients.

You will support developers, operations, IT and the overall company security posture. You and your team are responsible for maintaining our compliance program where we have achieved SOC 1 Type II, SOC 2 Type II, ISAE 3402 Type II, ISO 27001 and PCI Level 1 compliance.

What a day is like:

* Perform security related design and implementation reviews for the platform
* Automate to improve the abilities of other engineers to develop and maintain secure code
* Find and remediate security flaws across the software stack
* Coordinate with researchers on our bug bounty program to close exposed vulnerabilities
* Consult across teams on secure architecture design and implementations
* Propose, evaluate and build innovative new security features to benefit our users
* Assist with security incident response as needed
* Work with external pen testers to continually improve security on the platform

You're perfect for this role if:

You are collaborative, and use constructive feedback as a tool to continuously improve our development. You are personable and understanding. You and communicate and resolve security flaws and errors with empathy.

You also have:

* Expertise in conducting design reviews and remediating security issues in existing codeSolid foundation in web application security including Node.Js applications
* Experience with penetration testing against applications
* Deep proficiency in Java development, Groovy and Grails a plus
* Experience working with sensitive data like credit cards and other PII
* Proficiency in implementing sandboxing solutions
* BS in Computer Science or a related technical field / equivalent experience
* 4+ years of industry experience engineering web facing systems

Location

At our Headquarters in San Francisco, you'll be surrounded by the best and brightest in the industry, as well as a few of our furry friends. Your colleagues are wicked smart and some of the kindest and nicest people around. We're never assholes. You'll be given the opportunity to do creative problem solving for issues that actually matter, and have a real impact on the projects you are driving.

Culture

Our culture began day one when three Danes poured their brains, heart, and guts into creating a platform that could connect every business in the world. We expect each employee to approach their work with the same amount of pride and passion. One day you might find us having a ping pong match in the middle of the work day, and then you'll find us handing off projects to colleagues in different time zones so we can continue progress around the clock.

TradeShifters come from various backgrounds and nations, and we all thrive off challenging the status quo. We take pride in nurturing employee happiness, encouraging personal development, and welcoming teammates from all walks of life.

We value diversity and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Why you might like working here:

* You love autonomy and the freedom to get your work done how you want
* You like sharing your opinions and feeling like they matter
* You want to work for a company that requires you to bring your whole self to work every day: brains, heart, and guts.
* Career and professional development opportunities
* Flexible hours and vacation policy
* Supplemented cell phone plan
* Lunch provided daily from local SF eateries and snacks
* Fully paid 6 months parental leave
* A competitive compensation package + equity
* 100% covered medical, dental and vision benefits
* Life, short and long-term disability insurance
* 401k
* Wellness and volunteer Programs
* Fun company events like happy hours, outings and much more!

This is a full-time role based in our downtown San Francisco office. All your information will be kept confidential according to EEO guidelines.