Senior Security Engineer, Aha!
Ruby on Rails Experience
$110-190k
+ Equity & Profit-sharing program
Product development software
Open for applications
Product development software
101-200 employees
Open for applications
$110-190k
+ Equity & Profit-sharing program
101-200 employees
Company mission
To help companies build lovable software.
Role
Who you are
- Most of our features involve writing significant Ruby on Rails code, so you should be familiar with working in a Rails codebase
- You will perform security code reviews and should have experience reviewing code for security, compliance, or functional validation
- Overall, you have strong problem-solving abilities as well as experience working on important functionality for a cloud-based product
- We believe that being a kind person who elevates the rest of the team is just as valuable as writing great code
- You are humble, eager to learn, and always willing to help others
- You want teammates who enjoy solving problems, regardless of the technologies and techniques involved
- You have worked at meaningful scale before and want to do so again. You also have the following experience and skills:
- Four+ years of experience working in Ruby on Rails
- Experience with code reviews for security or functional validation in Ruby on Rails
- Experience developing features at a high-growth SaaS company
- Active collaborator with product team
- If this sounds appealing, we would love to hear from you. A real human reviews every application, so please use the form to help us learn more about you
What the job involves
- Our web application is a single-instance, multitenant Ruby on Rails monolith supported by Postgres (database), Redis (background jobs), and Memcached (Rails caching)
- We also run a Node.js webserver to support collaborative editing and real-time updates. Our application is hosted on Amazon Web Services and architected with ECS for reproducibility and scalability
- We use a growing amount of React on the front end to build rich client-side experiences, including our fully collaborative text editor and slide presentation editor
- We balance the strengths of both technologies: Rails for its conventions and simplicity and React for more powerful interactive functionality
- We do most of our planning and collaboration in Aha! Roadmaps and built Aha! Develop so software engineers and their teams can take advantage of those same rich features. We use Slack and Zoom for video calls. (Email? Rarely.)
- The security team works across our full suite of products and applications with a focus on core features such as authentication, authorization, file handling, and data segmentation. We also provide security reviews and guidance for the larger engineering team across the full stack
- We love Ruby on Rails and dig deep into code and business logic. As a Sr. Security Engineer, your work will include:
- Implementing security features and improvements with the customer experience in mind
- Security code reviews that go above and beyond what can be found with scanning tools (which we also use!)
- Investigating errors to identify security, resiliency, and performance improvements
- Developing and sharing secure patterns internally for ongoing education
Our take
Product managers and company builders have been somewhat left out regarding the collaborative and visual tools normalised in most work areas. Seeing a gap in the market, Aha! was founded to help product builders create specialised product development software, empowering them to transition from discovery to delivery seamlessly. Aha! offers a suite of product roadmap and marketing planning software, allowing teams to set strategies, capture customer ideas, create visual roadmaps, and manage marketing programs. Its suite includes Aha! Roadmaps, Aha! Ideas, Aha! Whiteboards, Aha! Knowledge, and Aha! Develop.
Although one of the first movers in the product development software space, Aha! doesn't lack competitors, with larger firms offering powerful but less product-focused solutions. However Aha! stands out for its customer service and the frictionless customisation of its workflows, allowing its platform to be used for any product development methodology imaginable. This has led to its use by more than 1 million product builders from leading tech and software companies.
Aha!'s business model is unusual in the tech startup scene in that its founders have eschewed the venture capital model owing to the pressures rapid scaling places on staff. Instead, it is an entirely bootstrapped business which has steadily grown into a profitable venture, more than doubling its revenue between 2018 and 2022. It has also been recognised as one of the best fully remote companies to work for. Aha! intends to keep up this momentum by adding extra products - such as the 2025-released Aha! Discovery - to its suite and expanding its marketing reach.
Steph
Company Specialist at Welcome to the Jungle
Insights
79% employee growth in 12 months
Company
Employee endorsements
Hard working team
"My experience at Aha! has been unmatched. Reasons include: 1- Useful product that is the #1 in the industry. 2- Team is filled with intelligent,..."
Company benefits
- Generous base salary plus profit sharing, and we contribute a percentage of your total pay each month toward your retirement
- Up to 200 hours of paid time off a year to spend however you want
- 30 to 90 days of paid parental leave and five to 10 days of paid care and bereavement leave
- Up to $1,000 annually for third-party education, along with paid time off to immerse yourself in learning
- Undergo a comprehensive 5-8 week onboarding program from day one, focusing on market, product, and company immersion
- Attend bi-annual onsites at luxurious destinations to foster team connection, reflecting on achievements and planning future endeavors
- Volunteer opportunities throughout the year
- Work from where you are happiest, as we operate as a fully remote company.
- Medical, dental, and vision plans — for many teammates, we cover 100 percent of the premiums 🇺🇸
Company values
- Integrity - We hire folks who are as good as their word and respect others, even when they disagree. That means no drama and no dysfunction. There is no wiggle room when it comes to being honest and having strong moral principles
- Skill - Hard effort + experience = skill. We hire experts who continually work to perfect their craft. Skill development is a conscious journey — we embrace opportunities to grow individually and as a team
- Effort - Having a plan is a start. But doing anything well is hard work. Who says work cannot be just as fulfilling as all the other parts of our lives? Our team loves pursuing audacious goals and achieving them together
- Ambition - We are natural achievers and want the opportunity to do something important. We set ambitious goals and always have plan to get there. We want to look back and say, "I helped build one of the greatest software companies."
- Learning - We are a learning organization. This looks like direct feedback, internal coaching programs, annual education stipends, and paid time off to enroll in professional classes. And we always strive to promote from within
- Team spirit - When you believe in what you are trying to accomplish, it is possible to achieve greatness together. It requires a clear vision and the ability to put the organization's goals on the same level as personal aspirations
Company HQ
Downtown Menlo Park, Menlo Park, CA
Articles
Leadership
Brian de Haaff
(CEO)After roles at RouteScience, Netli, and Network Chemistry, they co-founded Paglo in 2007. After this was acquired by Citrix, joined the company as VP of Product Line. Left this role to co-found Aha!.
Chris Waters
(CTO)They started their career by founding Celsius Research in 1995 and serving as CTO of Network Chemistry and Paglo Labs. They left their position as Principal Architect of Citrix to co-found Aha! with Brian.
Share this job
View 8 more jobs at Aha!