Security Software Engineer, Render

• Experience designing and building secure web applications, tools, and APIs
• Experience securing systems on AWS or GCP
• Experience with infrastructure as code (e.g. Terraform, Ansible)
• Knowledge of the Go programming language
• Experience with vulnerability review and analysis

Desirable

• We're looking for candidates with high integrity, low ego, and an insatiable drive to learn
• We use reasoned discussion and constant feedback to improve as individuals and as a company
• We cultivate mutual trust and respect, empowering us to debate ideas effectively and create the best outcomes for our customers and our team
• Build internal tooling to enable secure access to resources (e.g., wrappers, utilities, authentication services, and proxies)
• Maintain a development toolkit that enables our teammates to write secure code with ease and apply security best practices
• Analyze and assess security issues identified through security reviews, threat modeling, penetration testing, and vulnerability disclosure
• Work with developers on sensitive code paths and educate them on secure design patterns
• We're looking for a well-rounded, empathetic, security-minded software engineer to be a foundational part of building Render's security program
• Liaise with customers regarding their security and compliance needs, and in return, inform our security program
• Reduce compliance toil and friction through high-leverage automation and programmatic workflows
• Communicate security risks and solutions to technical and non-technical stakeholders as part of company-wide planning and prioritization processes
• Stay up-to-date with the latest security threats, vulnerabilities, and best practices and make recommendations for improvements to our security posture
• Partner with product engineering teams to inform and build thoughtful security features for our customers
• Continually ensure that our systems have appropriate authentication, authorization, and accounting with low internal overhead