Senior Application Security Engineer, Material Security
$170-220k
Email & cloud office security
Be an early applicant
Email & cloud office security
21-100 employees
Be an early applicant
$170-220k
21-100 employees
Company mission
Their goal is resilience, and they build security that works (and works simply).
Role
Who you are
- We are looking for a Senior AppSec Engineer who is a "builder" first
- Technical Depth: 5+ years of experience in application security, including significant time spent writing and reviewing code
- Software Engineering Skills: Proficiency in more than more than one major coding language. Preferably (but not required), that set would include Javascript/Typescript. You should be comfortable contributing directly to the codebase
- Cloud & Containers: Practical experience securing cloud environments (GCP preferred) and a strong understanding of Kubernetes security
- Systems Thinking: A deep understanding of identity and access management (SAML, OAuth, IAM) and how to protect sensitive data at rest and in transit
- Pragmatism: The ability to balance security risks with business velocity. You should be able to propose creative "middle ground" solutions that reduce risk without blocking progress
- Versatility: A willingness to jump into areas adjacent to traditional AppSec—e.g data analysis in BigQuery or learning about protecting against prompt injection —to get the job done
- If you enjoy diving deep into complex codebases and building infrastructure that scales security, we want to talk to you
What the job involves
- Material Security is a security company, which means the bar for our own application security is exceptionally high
- You won't just be pointing out vulnerabilities; you will be writing code to eliminate entire classes of bugs
- In this role, you will have a high degree of autonomy to shape our security culture
- You’ll spend your time partnering with engineering to ensure we’re building products and systems the right way and building internal tools that make it easier for our engineers to move fast without sacrificing safety
- Lead AppSec Strategy: Own the end-to-end security of the Material application, from design and threat modeling to deployment
- Vulnerability Management: Secure our dependency supply chain while working directly with engineering
- Build Security Tooling: Develop internal automation to detect and block abuse patterns and streamline security workflows (e.g., JIT access, dependency scanning)
- Code & Architecture Review: Perform deep-dive security audits and code reviews for new and existing product features
- Infrastructure Security: Partner with the infrastructure team to harden our Kubernetes deployments and cloud environments (GCP)
Our take
Email hacks are a real and immediate threat for businesses. Material Security is setting out to solve this problem by protecting companies and their employees.
Material Security was founded following the 2016 election hacking scandal, tapping into widespread demand for more resilient email protection. The company is led by a team of experienced ex-Google and Dropbox managers, which has shaped its tech considerably. The company is now valued at over $1 billion, an impressive testament to the quality of its solutions.
Material Security's main challenge will be competing with rival security providers. However, given its unicorn status, the company is likely to scale even further in the coming years and is well poised to open up a significant market lead.
Freddie
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 3 rounds)
May 2022
$100m
SERIES C
May 2021
$40m
SERIES B
Total funding: $162m
Company benefits
- Remote work flexibility
- Equity
- 100% coverage of Health, Dental, & Vision premiums for employees + dependents
- 401k plan
- Parental leave & fertility support
- Unlimited vacation policy
- Reimbursement for your dream home office
- Reimbursement for cell phone & internet
- Quarterly company offsites
- Secret & "totally a surprise" birthday treat
- Monday morning weekend updates
Company HQ
Centennial, Redwood City, CA
Leadership
Ryan Noon
(Co-Founder & Chairman)Worked as an Engineering Lead at Ayasdi, and founded Parastructure, which was acquired by Dropbox. Went onto serve as an Engineering Manager at Dropbox.
Abhishek Agrawal
(Co-Founder & CEO)Previously worked as a Software Development Engineer at Microsoft Office Labs, and was a Senior Product Manager at Dropbox.
Christopher Park
(Co-Founder & VP Engineering)Worked as a Senior Software Developer at Camstar Systems, and was a Software Engineer at Google and Parastructure. Joined Dropbox as an Engineering Manager.
Share this job
View 2 more jobs at Material Security