Staff Application Security Engineer, Span.IO
$160-215k
+ Equity
Electrical equipment manufacturing
Open for applications
Electrical equipment manufacturing
201-500 employees
Open for applications
$160-215k
+ Equity
201-500 employees
Company mission
To enable homes to get clean energy faster, cheaper and more easily. Impacting climate change is our passion.
Role
Who you are
- Ideal candidates will have extensive experience in application security, deep understanding of secure coding practices and ability to influence and educate others on security matters
- Bachelor’s Degree in Computer Science, Information Assurance, Cyber Security, or related field of study
- 7+ years of experience in a security engineering or operations role, with a focus on application security
- Hands-on experience with one or more security tools such as Burp Suite, SonarQube, OWASP ZAP and Checkmarx
- Strong knowledge of applied cryptography, TLS/SSL, web authentication protocols such as OAuth/SAML
- Deep understanding of web application vulnerabilities and defenses
- Proficient in scripting languages such as Python, Perl, PHP, or Ruby for task automation and data manipulation
- Experience in developing threat models (e.g., STRIDE, DREAD)
- Hands-on experience with AWS Security best practices
- Experience with vulnerability scanning tools like Qualys, Nessus, etc
- Experience with SIEM tools like Splunk, Sumo Logic, etc
- Certifications such as CISSP, CSSLP, or relevant industry certifications are a plus
What the job involves
- We are seeking a highly skilled and experienced individual to join our Security & Privacy team at SPAN as a Staff Application Security Engineer
- In this critical role, you will be instrumental in building and enhancing SPAN’s application security program
- Your responsibilities will ensure the security of our applications through proactive assessment, threat modeling, code reviews and close collaboration with the development teams
- Lead and execute application security assessments, including static application security testing (SAST), dynamic application security testing (DAST), code reviews, penetration testing, and security architecture reviews
- Collaborate closely with development teams to integrate security best practices into the software development lifecycle (SDLC)
- Perform threat modeling on existing and upcoming feature sets in SPAN applications to ensure appropriate security controls are built from the ground up
- Develop and enforce a robust Identity and Access Management posture
- Design, implement, and maintain application security controls and solutions, leveraging hands-on coding experience
- Automate application security controls using scripting to minimize human interaction and increase efficiency
- Own the vulnerability assessment and patch triage process to support ongoing vulnerability and patch management at SPAN and provide recommendations for identified vulnerabilities
- Ensure compliance with regulatory requirements and industry standards including risk assessments and risk mitigation strategies for application security
- Ensure that our production platform in AWS is hardened as per industry standards, such as CIS benchmarks
- Deploy and manage Security Incident and Event Management (SIEM) solutions at SPAN
- Participate in the evaluation, selection, and deployment of cutting-edge security tools and technologies
- Stay current with the latest application security threats, vulnerabilities, and best practices. Continuously evaluate and improve application security processes and technologies
Our take
Span helps homeowners looking to improve their energy resilience by replacing electric panels, many of them decades old, with a flexible smart panel that helps users monitor and control their energy usage from a single app.
Founded in just 2018, Span has made great strides in both price and technological development and has won the International Builders' Show 2022 Best Energy Efficient Product award for its Gen 2 smart Panel. Significant funding rounds have propelled product development, including a future-looking integration of its equipment with that of solar inverter, battery, and EV charger manufacturers.
This fast-developing and innovative answer to a previously stagnant home energy feature directly caters to the increasing demand for energy efficiency in the home. This is exemplified by a 2024 partnership with PulteGroup, the third-largest homebuilder in the US. With CEO Arch Rao at the helm, previously head of Products, Application & Sales Engineering at Tesla, Span seems likely to continue on its winning streak with increasingly affordable renewable energy products.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 5 rounds)
Apr 2023
$96m
SERIES B
Mar 2022
$90m
SERIES B
Total funding: $229.8m
Company benefits
- Competitive compensation and early equity at a well-funded, fast-growing, venture-backed company (read more on why Amazon and others invested in SPAN here and here)
- A sunny 20,000 sqft hardware lab + office space in SOMA, a stone’s throw from Caltrain and close to BART
- Flexible hours and vacation time - we simultaneously work hard and make space for the important stuff
- Additional SPAN holidays in celebration of causes we believe in (i.e. Black History Day, Women’s History Day, Earth Day and Gay Pride & Juneteenth among others)
- Comprehensive benefits include a choice of medical plans; dental, vision, life, and disability insurance
- Diversity - we are serious about this. SPAN embraces diversity and equal opportunity in a serious way. We are committed to building a team that represents a variety of backgrounds,
Company HQ
SoMa, San Francisco, CA
Articles
Leadership
Arch Padmanabhan Rao
(Founder & CEO )After graduating from Stanford with an MS in Mechanical Engineering, Arch was an Energy Consultant for LCG Consulting and Technical Advisor for The Westly Group. They co-founded Verdigris, which used AI to eliminate electricity waste and was the Head of Products, Application and Sales engineering at Tesla Motors before founding Span.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 16 more jobs at Span.IO