Staff Product Security Engineer, Butterfly Network

• BS degree in related field or equivalent experience. An MS degree in a related field or equivalent experience is a plus
• Minimum 10+ years of experience in core security domains such as Application Security, Cloud and Network Security, Vulnerability Management, etc
• Strong understanding of secure engineering concepts such as secure coding practices and secure code reviews, threat modeling, and the ability to identify, mitigate and prevent threat vectors
• Development experience and excellent understanding in mitigating OWASP Top 10 attacks on applications, cryptography and key management, PKI, TLS/SSL, DDoS mitigation, authentication, authorization & application security
• Application penetration testing experience
• Continuous Monitoring (Con-Mon) Analysis and Reporting of performance KPIs and KRIs
• Familiar with serverless computing such as AWS Lambda and container implementations with EKS, Kubernetes, etc
• Experience leading design and security reviews of cloud-based systems
• Ability to work closely with hardware, software, and cloud engineers

Desirable

• Butterfly’s Product Security team works on a secure-by-design principle and is responsible for the security of our product and cloud environments
• In this role, you will have the opportunity to work with cross-functional teams as a security subject matter expert (SME)
• You will work on proactively identifying security risks within our environment, mitigating them through the design, implementation, and improvement of security controls
• Drive adoption of security best practices as part of the product development lifecycle
• Work with internal teams, vendors, and partners to identify, architect, and advance security at Butterfly
• Develop technical solutions to help mitigate security risks and vulnerabilities
• Perform technical security assessments, threat modeling, code audits, and design reviews with engineers to help ensure effective and secure development practices
• Assist in the implementation of security-related product features like authentication, cryptography, etc
• Review vulnerability and penetration testing, present assessment reports to clearly detail security findings and work with developers to remediate the issues identified
• Participate actively in product design meetings providing insight and direction related to application security risks
• Monitor security compliance to information security policies and standards
• Assist in the implementation and operation of DAST/SAST/SCA/WAF solutions