Staff Application Security Engineer, Forma
A modern-day benefits platform
Open for applications
A modern-day benefits platform
101-200 employees
Open for applications
101-200 employees
Company mission
To give every employee the ability to integrate work and life seamlessly.
Role
Who you are
- This role demands a detail-oriented and proactive engineer capable of diagnosing and resolving security issues within a dynamic and rapidly evolving environment
- Bachelor’s or Master’s degree in Information Systems, Computer Science, or a related field
- At least 8+ years of experience in security engineering, with a solid understanding of security protocols, cryptography, and application security
- Experience with cloud security architectures and solutions, particularly in AWS, Azure, or Google Cloud environments
- Proven ability to work with network diagnostic, monitoring, and analysis tools
- Strong problem-solving skills and the ability to work under pressure in a fast-paced environment
- Professional certifications such as CEH, OSCP, OSWE, etc
- Experience in a startup or SaaS environment is a plus
What the job involves
- As a Staff Application Security Engineer at Forma, you will be instrumental in fortifying our security framework and ensuring the integrity and confidentiality of our data and systems
- Conduct regular application, system and network security penetration tests and audits to identify potential vulnerabilities
- Develop and implement security enhancements for Forma’s cloud-based infrastructure, focusing on continuous improvement of our defenses against threats
- Collaborate with the engineering teams to integrate security practices into the development lifecycle and to ensure secure coding practices are followed
- Manage and tune security tools and technologies such as firewalls, intrusion detection systems, and encryption
- Respond to and investigate security breaches or incidents, managing the resolution process and mitigating any impacts
- Participate in the creation and maintenance of security policies and procedures, ensuring they meet compliance requirements like SOC2 and ISO 27001
- Educate and train staff on security protocols and best practices, fostering a culture of security awareness within the organization
Our take
Forma is looking to reimagine the employee benefits model. The company helps HR departments select the right benefits, and by leveraging its vendor network, also offer these at a more affordable cost. Forma then also helps employees make smarter, more transparent decisions regarding their health and wellness work benefits.
With generations X and Z dominating the workforce, benefits expectations are rapidly changing. Add to that the upheaval of employee expectations precipitated by the switch to hybrid workforces, and many HR departments have struggled to keep pace with the rate of change. Unused benefits, and enquiries from under-informed employees, eat up both time and resources that undermine the efficiency and credibility of a businesses’ benefits program. Therefore, Forma's solution to this should be appealing for employers and employees alike.
Testament to the efficacy of its model, Forma was only founded in 2017 as Twic, and already boasts the likes of Zoom, Stripe, and DataDog among its customers. With the nature of modern workforces still in flux, Forma look well-placed to be catering to an adaptive, demanding new benefits landscape.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (1 round)
Mar 2022
$40m
SERIES B
Total funding: $40m
Company benefits
- Remote Friendly
- Health Care
- Flexible PTO
- Parental Leave
- Lifestyle Stipend
- Team Building Stipend
- Productivity Stipend
- Career Opportunities
Company values
- We never Settle
- We raise each other's bars
- We've got you
- We own our work
Company HQ
Civic Center, San Francisco, CA
Articles
Share this job
View 14 more jobs at Forma