Product Security Engineer - Remote

Overview

At Mattermost, we build the #1 collaborative workflow solution for defense, intelligence, security, and critical infrastructure organizations. Trusted by governments, financial institutions, and technology companies, our platform enables secure, efficient operations for the world’s most critical teams.

In Short

• Support the application vulnerability management and mitigation approaches
• Conduct application security reviews through manual code review or static/dynamic code analysis
• Engage in threat modelling and design reviews of in-house developed software components
• Provide security guidance and training to internal development teams
• Triage SCA findings and support internal development teams in SCA findings remediation
• Improve and/or automate existing processes to increase efficiency

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, or a related technical field, or equivalent experience, with 3+ years of relevant experience in application security, secure software development, or penetration testing
• Understanding of web application security and secure development practices
• Familiarity with common security libraries, security controls, and common security flaws
• Experience with static/dynamic analysis, and common exploit methods
• Experience in one or more programming languages, ideally Go or JavaScript
• Excellent written and verbal communication skills
• Demonstrable teamwork skills and resourcefulness

Benefits

• Remote-first work environment
• Opportunities for professional growth
• Collaborative team culture
• Inclusive workplace