Senior Application Security Engineer, Iterable

• 3-5 years of experience as a security engineer, cloud/platform security engineer, software engineer, site reliability engineer, or a comparable like position
• Competency in one or more programming languages (bonus points for Scala experience)
• Strong knowledge of application security principles, including secure coding, threat modeling, and common application vulnerabilities (e.g., OWASP Top 10)
• Familiarity with Github and / or Gitlab workflows
• Interest or experience in both the development of security guardrails and the shift-left paradigm
• Strong analytical and problem-solving skills, with the ability to work independently and as part of a collaborative team
• You are seeking to contribute to a high-growth environment and play a key role in building new programs from the ground up
• You care about the details, and are willing to ask questions when you’re unsure
• You are comfortable handling the unknown, and seek to bring clarity in ambiguous situations

Desirable

• Iterable is a leading AI-powered customer engagement platform, helping businesses drive growth through personalized customer experiences.
• Our security team plays an essential role in safeguarding systems and customer data, ensuring robust protection and resilience. We are looking for a Senior Security Engineer to join our growing team
• Perform risk assessments, architectural designs, threat models, code reviews, and more—pragmatically balancing security with other business considerations
• Build and enhance automated security testing frameworks, incorporating tools like static and dynamic analysis to identify vulnerabilities early in the development process
• Drive the integration of security tools into the CI/CD pipeline, ensuring continuous monitoring and automated threat detection across applications and infrastructure
• Partner cross-functionally for security monitoring & incident response; proposing & building security detections and runbooks
• Respond to security incidents, security vulnerabilities, and security events. Investigate, analyze, and coordinate remediation activities, ensuring quick containment and long-term improvements
• Develop and implement threat detection strategies, propose detection rules to monitor for emerging threats and vulnerabilities in real-time
• Partner with engineering teams to implement secure coding practices, provide security training, and integrate security-first mindset into development workflows
• Stay current with evolving security threats, vulnerabilities, and best practices, sharing insights with cross-functional teams to strengthen security measures