Staff Security Engineer, Stash

• Bachelors in Computer Science or a related discipline or equivalent experience
• 7+ years proven work experience as a security professional with hands-on experience in multiple security domains including but not limited to Security Architecture, Network Security, Cloud Security, Mobile Security, and Web Security
• 5+ years experience working with AWS
• Strong comprehension of secure application development practices
• Experience with conducting security assessments
• Software development experience with one of the following languages: Ruby on Rails, Scala, Java, or Go
• Strong scripting experience in Python and/or Bash
• Strong experience with Terraform
• Exceptional written and oral presentation skills

Desirable

• We are looking for two Staff Security Engineers to join our team and protect our rapidly expanding web and mobile investment platform
• As a Staff Security Engineer, you’ll be responsible for identifying and architecting solutions that will protect Stash customers, employees and our product from attacks.These are hands-on security engineering roles.
• The ideal candidates will have a strong track record of implementing security technologies in highly regulated and fast-paced environments and will have experience in cloud security, security engineering as well as product and enterprise security
• Work to protect Stash’s data stores, endpoints, systems, networks, applications, and personnel. Including but not limited to, zero-trust, secrets management, identity management, mobile device posture management, cloud posture management, user behavior analytics, and bot management solutions
• Improve and maintain Stash’s protective and detective security controls through continuous improvement and automation
• Working to identify areas of security vulnerabilities and drive cleverly engineered, scalable solutions that improve our defense-in-depth
• Helping other engineers design more secure systems via design input and code review
• Enhance the SDLC to incorporate security development best practices, testing and auditing
• Oversee or perform penetration tests, vulnerability scans and risk assessments on our microservices and infrastructure
• Be a security subject matter expert and respond to any internal security engineering questions/requests