Application Security Engineer, Fetch
Offers equity
Mobile shopping and rewards platform
Job no longer available
Mobile shopping and rewards platform
501-1000 employees
Job no longer available
Offers equity
501-1000 employees
Company mission
To help reimagine what shopping looks like.
Role
Who you are
- Strong problem-solving and critical thinking skills
- Excellent communication and ability to translate technical security findings into actionable insights for non-technical teams
- Strong collaboration and relationship-building skills to work effectively with developers, operations, and business stakeholders
- Ability to thrive in a fast-paced and agile environment, adapting to changing priorities
- Proficiency in programming languages such as Python or Go.Strong understanding of secure coding practices and application security frameworks (OWASP Top 10, SANS CWE)
- Experience with static and dynamic application security testing (SAST/DAST) tools
- Hands-on experience implementing security in CI/CD pipelines (DevSecOps)
- Solid understanding of web application architecture (APIs, microservices, authentication mechanisms)
- Experience building and deploying security solutions in AWS or other cloud environments
- Familiarity with security automation tools
- Proven understanding of container security (Docker/Kubernetes)
- Knowledge of cloud platforms like AWS (IAM, security groups, encryption) and their security best practices
- Familiarity with penetration testing tools (Burp Suite, ZAP) and vulnerability management platforms
- JFrog xray, Github Actions
- Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent work experience)
- 3+ years of experience in application security or a related role
- Relevant certifications such as CISSP, CEH, OSCP, GWAPT, or CSSLP are a plus
What the job involves
- Fetch is seeking a versatile and motivated Security Application Engineer to join our Information Security team
- The Security Application Engineer will serve as the bridge between development, operations, and Information Security, ensuring the design, development, and deployment of secure applications across Fetch’s technology landscape
- Collaborate with engineering and product teams to incorporate security principles throughout the software development process. This includes ensuring that security considerations are addressed during planning, design, implementation, and deployment stages
- Conduct and facilitate secure code reviews, analyzing code for vulnerabilities and providing actionable, prioritized recommendations for remediation
- Guide teams in implementing secure coding practices, such as input validation, proper error handling, and adherence to standards (OWASP Top 10, SANS CWE)
- Perform and consult on application security testing, including static analysis (SAST), dynamic analysis (DAST), and manual penetration testing of applications
- Identify and assess vulnerabilities, risks, and gaps in Fetch's applications. Work with developers to triage vulnerabilities and ensure timely resolution
- Develop and integrate security tools into CI/CD pipelines (DevSecOps) to automate security checks
- Maintain and enhance security tools, including SAST, DAST, and open-source vulnerability scanners
- Conduct threat modeling and security reviews of applications and systems
- Develop and communicate strategies for mitigating identified risks early in the development cycle
- Respond to security incidents involving application vulnerabilities
- Assist in root cause analysis, remediation planning, and implementation to prevent reoccurrence
- Educate and train developers and teams on secure coding practices, security frameworks, and emerging threats
- Foster a security-first culture, encouraging secure design and development practices
- Stay up-to-date with the latest application security tools, techniques, and threat landscapes
- Continuously improve security processes, practices, and tools based on industry standards and lessons learned
Our take
Leading mobile shopping and loyalty platform Fetch has seen explosive success in recent years. Its concept is simple: users receive spendable points in exchange for scans of their shopping receipts.
The app has tens of millions of daily active users with even more downloads, and has seen impressive growth, having now reached 'unicorn' status twice over. This should come as no surprise. Brand reinforcement is crucial to customer retention and acquisition - but it is harder than ever, with the fragmentation of choice on the market and the declining efficacy of marketing. So material loyalty benefits are likely to prove a crucial tool in creating and leveraging a strong customer base.
Whilst Fetch faces competition from similar receipt-scan rewards platforms like ReceiptPal and Ibotta, it grew into a profitable company in late 2023. It is using its most recent Morgan Stanley-backed funding to aggressively add brand partners at a competitive pace and onboarding staff at a level that promises strong continued growth.
Steph
Company Specialist at Welcome to the Jungle
Insights
10% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Apr 2022
$120m
SERIES E
Mar 2021
$210m
SERIES D
Total funding: $456.6m
Company benefits
- Stock Options: Fetch wants you to be on the rocketship with us! Options will give you the opportunity to share the excitement of the company growth and have your own stake in its success
- 401k Match: We match 100% of the first 3% of your 401K contribution
- Benefits for humans and pets: We offer comprehensive PPO and HDHP plans (Dental | Vision | Life Insurance) in addition to pet insurance, fully covered for the first pet. Our bereavement leave also includes our furry friends
- Continuing Education: Fetch provides up to $10,000 per year in education reimbursement support for any job-related courses/programs/certifications. You will also have access to Udemy, an online course provider with thousands of topics to discover
- Employee Resource Groups: Take part in employee-led groups that are centered around fostering a diverse and inclusive workplace through events, dialogue and advocacy. Current groups include Amplify BiPoC, Amplify Women, Amplify LBGTQ+, Amplify Family, and Amplify Veterans
- Paid Time Off: On top of our flexible PTO, Fetch observes 9 paid holidays, including Juneteenth and Indigenous People’s Day, as well as our End-of-Year break
- Robust Leave Policies: Whether it’s for you or a loved one, Fetch offers generous leave time for various health and personal needs that take you away from work. Our parental leave policy provides 18 weeks of paid time off for primary caregivers, 12 weeks for secondary caregivers, and the option to create a flexible return to work schedule in the last few weeks of leave
- Wellness Program: Utilize these tools and resources to bring your best self to work each day
- Wellness coach on staff to help you create goals, provide accountability and support you on your wellness journey
- Nutrition counseling through Charge Nutrition
- Gympass membership to access in-person gyms, virtual workout classes, meditation apps, and much more
- Employee Assistance Program (EAP) provides no cost, confidential resources and services to help navigate life's many changes and challenges
- Hybrid Work Environment: Collaborate with your team in one of our stunning offices in Madison, Birmingham or Chicago 1 - 2 times per week. We’ll ensure you are equally equipped with the hardware and software you need to get your job done in the comfort of your home
- Social Impact Efforts: Take part in volunteer events or donate to your favorite organizations through BrightFunds
Company HQ
Madison, WI
Leadership
Wes Schroll
(CEO)Founded Fetch while in undergrad at UW-Madison and grew the company into the nation's No. 1 rewards app, connecting millions of consumers with their favorite brands.
Tyler Kennedy
(VP of Operations)Studied Business Administration at the University of Wisconsin-Madison. Founded his first company, a yacht detailing company, when they were only fourteen.
Share this job
View 13 more jobs at Fetch