Staff/Principal Application Security Engineer, Binti
$240-330k
Please equity
SaaS solutions for child welfare agencies
Open for applications
SaaS solutions for child welfare agencies
101-200 employees
Open for applications
$240-330k
Please equity
101-200 employees
Company mission
Binti’s mission is to reinvent child welfare through software with the goal of helping every child to have a family.
Role
Who you are
- Technical Expertise: Proven experience as an Application Security Engineer or in a similar role. Strong technical background with experience in full-stack development, cloud computing, and scalable architecture. Proficiency in one or more OOP coding languages (Ruby, Python, Java, etc) is strongly preferred
- Deep Understanding: Strong understanding and knowledge of web application security principles, common vulnerabilities, and best practices
- Collaborative Approach: Excellent communication skills with the ability to simply convey complex security concepts to non-technical stakeholders and clearly articulate the relative risks and trade-offs
- Product Orientation: Focused on keeping the company secure while ensuring the team can still ship products and deliver value to customers and users
- Decisions That Scale: Experience cultivating a security-aware development culture that scales through mentorship and automation
- Passion for Social Impact: A genuine interest in leveraging technology to address social challenges, with a strong sense of purpose in improving outcomes for children in need
- Drive urgency with intention: A sense of pragmatism, resourcefulness, and focus to advance our security goals with a relatively small team
- Big plus - prior experience with GovTech or FedRamp
What the job involves
- As Binti's first Principal Security Engineer (Applications focused), reporting to our CTO, you will play a critical role in ensuring the security and integrity of our software applications
- You will work alongside Binti’s full-stack engineers, contribute to security controls in our software, identify and address potential security vulnerabilities, implement best practices, and uphold secure coding standards
- Conduct Security Assessments: Provide holistic assessments of Binti’s security stance, including performing regular security reviews, code audits, penetration testing, and threat modeling to maintain the highest standard of application security
- Set Direction: Help Binti chart a specific and pragmatic course of action to achieve a strong security posture. This includes scoping and prioritizing work, determining what levels of investment and risk we should take on given our scale and capacity, contributing to job descriptions and hiring plans for the next team members, and building relationships across teams and with company leadership to effectively communicate and advocate for these goals
- Respond To Incidents: Respond promptly to security incidents, collaborate with engineers on-call, and provide detailed post-event analyses. Evaluate the applicability of emergent security concerns through risk rating and assessment (such as OWASP)
- Improve Security Architecture: In a leadership capacity with the Engineering team, identify, design, and implement technologies to enhance security automation, during the software development lifecycle, within the product itself, and in cloud hosting environments
- Set Security Standards: Lead efforts to design and implement secure coding standards and best practices across the development lifecycle, with an eye toward automation, including effective AI tools
- Share Expertise: Stay up to date on the latest security threats, vulnerabilities, and industry best practices, and ensure the integration of this knowledge into Binti’s security strategies. Act as our company’s expert on application security matters, providing mentorship to development teams and fostering a scalable, security-aware culture
- Represent the Security team to other Binti teams and Binti leadership: Act as a steward of the Binti values. Tell the story of the security team, advertising its good work, and celebrating wins
- Review and implement security patches and hotfixes in production applications
- Implement streamlined feedback of security recommendations for new products before launch into the Binti platform
- Improve the security of documents and files uploaded and downloaded on the platform
- Analysis, scoping, and implementation of security improvements to better protect Personal Health Information and Personally Identifiable Information stored within the product
- Improve notification and escalation of security concerns from third parties (such as security researchers)
- Integration of new and existing logging and alerting systems to centralized and/or decentralized Security Incident and Event Management (SIEM) platforms
- Assess backlog of application-specific security tickets and provide recommendations for remediation and
- Support evidence collection for compliance frameworks such as SOC 2 Type II and HIPAA
- In partnership with a vendor, stand up a bug bounty program and drive engagement from external security researchers
- Drive the timely completion of critical security tasks (e.g. incident remediation follow-ups), sometimes implementing personally, and sometimes overseeing the implementation by full-stack engineers
Our take
In the US there are almost half a million children in foster care, and around a quarter of those are still waiting to be adopted. Connecting children with the right families, all of whom need to be thoroughly checked before approval, is a long and labor-heavy process involving huge volumes of paperwork.
Binti is aiming to reinvent child welfare by partnering with county and state governments, and private social work firms. The company provides them with modern software to speed up and increase approval volumes while still maintaining high standards.
The company has grown quickly since launching in 2017 and struck partnerships with the likes of the Los Angeles County Department of Children and Family Services, & NYC Children’s Services. The company is showing no signs of slowing down, having concluded a major fundraise to expand further across the US in 2021.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (1 round)
Aug 2021
$45m
SERIES B
Total funding: $45m
Company benefits
- An above-market compensation package (salary + equity)
- Excellent medical, dental, vision, and life insurance - 99% of insurance premiums covered for you + your dependents
- Flexible vacation time to promote a healthy work-life blend, targeting 20 days/year
- 16 weeks of paid parental bonding leave for the arrival of a newborn or newly placed infant
- 13 paid holidays; 11 Federally observed holidays (including Juneteenth), plus the day after Thanksgiving and Election Day
- Sick/Mental Health time separate from vacation days (72 hours)
- 4 weeks of sabbatical after 4 years of service at the company
- 401(k) with 100% match of contributions up to 4% of your annual salary
- Commuter benefits, FSA, and DCSA with administration paid for
- $5,000 annual bonus for employees who volunteer as a CASA (court-appointed special advocates)
- $2,500 annual reimbursement for ongoing learning and development, with opportunities to attend trainings/conferences, on-site speaker series, and lunch and learns
- $1,000 reimbursement for virtual home office setup
- $100/month remote work stipend to cover internet, electricity, or home office setup costs, or $250/month for a co-working space
- Weekly reimbursement for lunch with coworkers - virtually or at our Oakland office
- Paid Jury Duty
- Remote work friendly
Company HQ
Downtown, Oakland, CA
Leadership
Felicia Curcuru
(Co-Founder & CEO)Former Engagement Manager at McKinsey. Also served as Director of Business Development and VP User Experience at online venture capital platform, FundersClub.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 4 more jobs at Binti