Security Engineer, Kajabi

• You have 3+ years of experience working on a security team or product development team performing technical security assessments on modern web applications, APIs, and/or mobile applications within cloud hosted environments such as AWS or GCP
• Experience building security into the SDLC
• Experience with secure code review in languages such as Javascript, Python, and Ruby
• Experience developing with common scripting languages Python, BASH, etc
• Familiarity with common web application testing tools for DAST, SAST, and IAST analysis such as Burp Suite, Snyk, Checkmarx, and NetSparker
• Knowledge of software security testing procedures across multiple platforms and Operating Systems
• You are comfortable working with git and Github
• You are comfortable writing and understanding code
• Experience instituting organizational change with respect to security
• Effective spoken and written communicator to multiple audiences
• You partner with and support your engineering colleagues to evangelize best practices rather than dictate

Desirable

• The Information Security & Privacy team at Kajabi has oversight into the security and privacy practices of the entire organization, instantiating security policies and best practices, as well as automation of these policies/practices where possible
• We are looking for a Security Engineer to join our growing team to work across the company
• As a Security Engineer, you would ensure the security of Kajabi's products and services
• Integrate security into the CI/CD pipeline
• Perform penetration testing and code reviews of web and mobile applications
• Perform design reviews and threat modeling of web and mobile applications in partnership of Manager, Information Security & Privacy and Security Engineers
• Provide remediation guidance to respective development teams
• Create and maintain application security best practices including vulnerability management and threat modeling
• Work with Manager, Information Security & Privacy to ensure that all practices of the application security program are intelligence and risk based
• Support general Information Security & Privacy initiatives as they arise
• Collaborate with engineering teams in the design phase of new products and features
• Support Security training and outreach to Kajabi engineering teams
• Develop and automate security tools and process where possible