Senior Application Security Engineer, Easypost
Shipping solutions API
Job no longer available
Shipping solutions API
201-500 employees
Job no longer available
201-500 employees
Company mission
To enable efficient, cost-effective, modern shipping experiences.
Role
Who you are
- 6+ years of related work experience
- Ability to code proficiently in at least two of the following programming languages: Python, Ruby, Go, and Rust
- Ability to design systems that are simple to understand, maintainable, scalable, and resilient
- Prior experience securing large-scale web applications and/or Application Programming Interfaces (APIs), including performing security design reviews, vulnerability assessments, and building testing strategies for logic flaws
- The ability to understand and communicate concepts around threat modeling and risk management, including to both technical and non-technical stakeholders
- Proven history of building strong partnerships with Engineering and Product teams to deliver world-class products and features
- Working knowledge of several compliance and regulatory frameworks (SOC2, ISO 27001, SOX/ITGC, HIPAA, GDPR, CCPA, etc…)
- Experience in assessing risk and selecting key objectives during the vendor management lifecycle for software, hardware, cloud, and software-as-a-service vendors
- Deep knowledge of how to build and maintain mixed computing environments (Linux, Windows, Mac OS, and mobile devices)
- Past experience with migrating applications and services to public cloud providers (AWS, GCP, Azure, etc…)
What the job involves
- The Senior Security Engineer will play a critical role in maintaining and improving the security of EasyPost’s growing and evolving logistics ecosystem. Responsibilities will include identifying, planning, and completing high-impact security projects, reviewing new proposed product features, building new security systems and programs
- The Senior Security Engineer will leverage their experience and creativity to protect millions of users, the company, and our partner organizations against both identified and emerging security risks
- Lead the design, building and maintenance of security systems and infrastructure that support the organization's evolving business and security goals
- Collaborate with other teams to integrate security and privacy controls and technology into the company’s overall planning and development process from project inception to project delivery
- Build systems and programs that help security at EasyPost to scale efficiently in both breadth and depth of coverage
- Embrace “shift-left” DevSecOps patterns, including infrastructure-as-code and Continuous Integration/Continuous Delivery design patterns that move security feedback to the earliest phases of product development and provide faster feedback to partner teams
- Design and build key competitive security features within the product itself that will support continued business growth among security-conscious customers
- Build and maintain security alerting infrastructure that delivers timely, relevant, and actionable alerts directly to internal staff, customers, and users
- Create and maintain self-service documentation, training material, and knowledge base resources that help developers be more productive and write safer code
- Work directly with M&A entities to integrate their products and improve the overall security posture of their existing development and support environments
Our take
EasyPost's multi-carrier shipping API provides eCommerce businesses with seamless solutions to manage logistics. The platform allows companies to easily switch between shipping providers, track packages, and verify addresses. Saving businesses time and money and in turn, simplifying what would otherwise be a complex process.
When EasyPost emerged from stealth in 2013, it was widely recognised as the "Stripe for shipping". A comparison stemming from the company's ability to enable developers to integrate postage and shipping features into web applications. Which, at the time, was something legacy carriers like FedEx and UPS weren't taking advantage of.
As e-commerce has grown, EasyPost has expanded its reach and is now available in over 200 countries. It now offers Amazon Shipping, cementing its position as a market leader.
Freddie
Company Specialist at Welcome to the Jungle
Insights
12% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Sep 2021
$25m
SERIES B
May 2017
$9m
SERIES A
Total funding: $37.7m
Company benefits
- Medical, dental, vision plans
- Flexible time off
- Stock option opportunities
- 401(k) match
- Cross-functional learning
- Monthly virtual events
Company HQ
Lehi, UT
Leadership
Jarrett Streebin
(Founder & CEO)EasyPost was their first major business venture. Before launching the company, they worked for a family office investing venture.
Share this job
View 5 more jobs at Easypost