Senior Application Security Engineer, Webflow
$186-218k
+ Equity ownership
More information about location
No-code web design and hosting platform
Be an early applicant
No-code web design and hosting platform
1001+ employees
Be an early applicant
$186-218k
+ Equity ownership
More information about location
1001+ employees
Company mission
To give creative designers the tools they need to create powerful and beautiful websites, all without having to code.
Role
Who you are
- Master’s degree or foreign equivalent in Information Security, Computer Science, Computer Engineering, Information Technology, and other closely related degrees. In lieu of a Master’s degree, a Bachelor’s degree or foreign equivalent in Information Security, Computer Science, Computer Engineering, Information Technology, and other closely related degrees, and 5 years of experience in a related Application Security Engineer role is acceptable
- 3 years of experience in the following skills:
- Combined experience that includes any of the following: Threat Modeling, architecture reviews, secure code reviews and penetration testing
- Combined experience deploying and managing SAST, DAST, SCA and API Security tool; deploying and maintaining SDLC tools in CI/CD pipelines
- C, C++, Python, SQL, JavaScript and Java
- AWS & Cloud Security, Azure, or GitHub
- 2 years of experience in the following skills:
- Software development experience in security
- Developing automated workflows and end-to-end processes to prioritize, report, and remediate vulnerabilities discovered through Application Security Posture Management Tool
- Creating reporting dashboards to aggregate and track all vulnerability findings
- 1 year of experience in the following skills:
- Managing a bug bounty program
- Handling security incidents, and related response and future improvements
What the job involves
- Collaborate with the Webflow engineering team to secure Webflow’s web application platform and ecosystem
- Bring security best practices to the software development lifecycle
- Work as part of a team to champion security standards while balancing business strategies and requirements
- Support Webflow’s security current and future compliance frameworks
- Work to find security vulnerabilities through grey-box techniques, and propose solutions at the architecture and code level to mitigate findings
- Contribute code and architecture improvements to enable security within Webflow’s application for engineers
- Cross-train entry and mid-level application security engineers
- Coordinate documentation of computer security or emergency measure policies, procedures, or tests
- Coordinate monitoring of networks or systems for security breaches or intrusions and write reports regarding investigations of information security breaches or network evaluations
- Develop or implement software tools to assist in the detection, prevention, and analysis of security threats
- Conduct risk assessment or execution of system tests to ensure the functioning of data processing activities or security measures
Application process
- If you are extended an offer, that offer may be contingent upon your successful completion of a background check, which will be conducted in accordance with applicable laws
Our take
No-code development systems allow users to create and publish the kind of output that was once only possible with the help of a team of developers. Webflow is one such platform that allows non-developers to create professional websites without knowing any code. It joins others such as Pantheon, Weebly, Squarespace, and Wix in a hotly-contested low-code development market. While competition is high, so too is demand, with low-code platforms accounting for more than 65% of application development activity in 2024.
The popularity of platforms such as Webflow is perhaps not surprising, as low-code development is usually cheaper for companies to implement and reduces time to market. Webflow has been used by over 3.5 million designers and teams to create sites for companies including enterprise brands such as Dell, Rakuten, UpWork, and Petal. It raised a large amount of funding in a Series C round in 2022. This is being used to further develop its platform, with a longer-term goal of pivoting to providing a no-code tool not only for websites, but software development as well.
Steph
Company Specialist at Welcome to the Jungle
Insights
34% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Mar 2022
$120m
SERIES C
Jan 2021
$140m
SERIES B
Total funding: $334.9m
Company benefits
- 100% insurance coverage
- 401K and financial planning
- Paid time off
- Annual retreat and offsites
- 10% time - Take up to 4 hours per week to focus on building skills, working on projects, or learning new Webflow-related things outside of your daily to-do’s.
- Commuter benefits
- Vacation bonus
- Office setup budget
- Health and wellness stipend
- Remote work reimbursements
- Continued education coverage
- Choose your own adventure
- Webflow subscription discount
Company HQ
SoMa, San Francisco, CA
Leadership
Vlad Magdalin
(Co-founder & CEO)Having studied Computer Science at California Polytechnic, Vlad worked as a Web Associates Systems Engineer for 3 years before co-founding Chatterfox.com, where he spent 4 yeas. He left his Software Engineer position at Intuit in August 2012 to co-found Webflow the following month, and has been CEO since.
Sergie Magdalin
(Co-founder)Sergie spent 4 years as a freelance Graphic Designer before joining NameMuir Skate as a Web & UX Designer.
Bryant Chou
(Co-founder)Previously a Senior Software Engineer at Intuit and CTO at Vungle. He was also the founding CTO at Webflow.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 45 more jobs at Webflow