Senior Application Security Engineer - Remote

Overview

Lattice’s Engineering team is continuously working to better both our product and our craft. We use a modern, cutting-edge tech stack and love experimenting with new technologies. We strive for maintainable, robust, and performant code. We’re highly collaborative and continuously iterative and work closely with designers and product managers. We prioritize not only great technical architecture but also an amazing product experience.

In Short

• Mentor and advise product development teams in the area of application security
• Assist teams in reproducing, triaging, and addressing application security vulnerabilities
• Assist in the implementation of security processes and automated tooling that prevent classes of security issues
• Design and implement Typescript code libraries and patterns to improve application security
• Perform security-focused code reviews
• Work with infrastructure teams to ensure our systems are secure
• Support the bug bounty program
• Evaluate tools, from SAST/DAST to cloud security analysis tooling, among others
• Lead application security reviews and threat modeling, including code review and dynamic testing
• Help develop security training and socialize the material with product development teams

Requirements

• Software development experience, ideally with Javascript/Typescript, or another programming language such as Python or Ruby
• Familiarity with secure coding practices
• Familiarity with security tools and libraries such as static/dynamic analysis tools and penetration testing tools
• Familiarity with and ability to explain common security flaws and ways to address them (e.g. OWASP Top 10)
• Strong understanding and experience with common security libraries, security controls, and common security flaws
• Strong communication and collaboration skills

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life, AD&D, and Disability Insurance
• Emergency Weather Support
• Wellness Apps
• Paid Parental Leave
• Paid Time off inclusive of holidays and sick time
• Commuter & Parking Accounts
• Lunches in the Office
• Workplace Amenities Stipend
• Internet and Phone Stipend
• One time WFH Office Set-Up Stipend
• 401(k) retirement plan
• Financial Planning
• Learning & Development Budget
• Sabbatical Program
• Invest in Your People Fund