Senior Application Security Engineer, LaunchDarkly
$158.9-240k
Salary dependent on location + Restricted Stock Units (RSUs)
Feature management for software teams
Open for applications
Feature management for software teams
501-1000 employees
Open for applications
$158.9-240k
Salary dependent on location + Restricted Stock Units (RSUs)
501-1000 employees
Company mission
To empower all teams to deliver and control their software.
Role
Who you are
- Have 5+ years of experience in application security, product security, or a related role
- Have strong software engineering skills and can write secure, maintainable code in at least one modern programming language (e.g., Go, Python, JavaScript/TypeScript)
- Have experience securing cloud-native applications (especially on AWS), including modern infrastructure-as-code, microservices, and service mesh environments
- Understand the types of security issues common in SaaS platforms (e.g., SSRF, IDOR, SQL injection, XSS, etc.) and know how to address them effectively
- Know how to integrate security into the software development lifecycle, including build pipelines and developer tooling
- Communicate clearly and work effectively across teams, building relationships and collaborating with product managers, developers, and infrastructure teams
- Are self-directed and comfortable in fast-moving or ambiguous environments — you can identify problems and lead the way to solve them
- Ready to jump into an active product & application security program with a great team, looking for ways to support existing team members and innovate the program further
What the job involves
- As a Senior Application Security Engineer at LaunchDarkly, you’ll help ensure the safety of our customers' data and the resilience of our platform
- You’ll be part of a small, high-leverage team focused on building secure systems and enabling secure product development
- Your work will directly support the business by helping developers move fast without sacrificing security through automation, guidance, and engineering
- We’re looking for someone who can not only identify and fix vulnerabilities, but also help us build scalable programs to prevent them in the first place
- You’ll bring technical and relational leadership, deep knowledge of application and cloud security, and a passion for collaborating and enabling engineering teams to ship secure code confidently
- You’ll report to the Director of Security and work closely with software engineers, product managers, and other security engineers to reduce the risk of unwanted security outcomes across LaunchDarkly’s platform
- Serve as a trusted advisor to product and infrastructure engineering teams during security reviews and architecture planning
- Design and implement secure-by-default patterns and reusable libraries to reduce developer burden
- Lead threat modeling and application security assessments across our product surface
- Integrate security tooling into CI/CD workflows to improve vulnerability and misconfiguration detection
- Operate and evolve our bug bounty and third-party pentest programs
- Contribute to the design of platform security features and customer-facing security controls
- Develop and maintain automation to support secure development at scale
- Mentor engineers and model thoughtful, modern approaches to application and product security
- Stay informed on emerging threats and identify how they apply to LaunchDarkly’s environment now, and products actively being developed
Our take
Feature flags are a powerful software development tool, allowing teams to modify system behavior without changing code, therefore minimizing risk. If a business has a new feature they want to test, they can then roll it out to a small set of users before letting it go live. These companies can, for example, get quick feedback on the new feature and fix any bugs, or roll back any changes.
LaunchDarkly allows companies to run tests like this by activating the new code for only a small set of users prior to launch. Typically running these tests requires lots of developer time - a daunting and expensive prospect for most rapidly growing businesses - and can risk disruption to the user experience if testing takes place on the live product.
The platform is used by more than 1,500 customers, including the likes of IBM, Intuit and Atlassian. Signalling a change in strategy, the company shook up its management in 2023 and is now aiming to scale its already strong growth under the leadership of Dan Rogers, a product and marketing specialist with an impressive track record at Rubrik, AWS and Microsoft. It is now well poised to develop into a leading business in the feature management space.
Freddie
Company Specialist at Welcome to the Jungle
Insights
0% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Aug 2021
$200m
SERIES D
Jan 2020
$54m
LATE VC
Total funding: $330.3m
Company benefits
- Full Vision
- Full Dental
- Full Medical
- Flexible Schedule
- Healthy Lunches & Snacks
- Conference & Meetup Access
- Education Stipend
- Personalized Work Station
- Close to Public Transportation
- Bike Parking
- Team Activities
- Unlimited paid time off policy
- Work from home opportunities
- Health insurance
Company HQ
Lakeside, Oakland, CA
Leadership
Edith Harbaugh
(Executive Chair)Worked as a Product Manager at Vignette, Monster Worldwide, and PlantSense. Previously Product Director at TripIt.
John Kodumal
(CTO)Prior to co-founding LaunchDarkly was Software Development Manager at Atlassian and Bytecode Anaylsis Architect for Coverity.
Share this job
View 29 more jobs at LaunchDarkly