Staff Application Security Engineer, Uniswap Labs

• The ideal candidate will have a deep understanding of application security principles, a proven track record of implementing security best practices, and strong leadership skills
• Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field
• 7+ years of experience in application security or related fields, with at least 3 years in a leadership or senior technical role
• Deep understanding of application security principles, practices, and technologies
• Experience with security testing tools and methodologies (e.g., static and dynamic analysis, penetration testing)
• Proficiency in programming and scripting languages (e.g., Java, Python, JavaScript)
• Strong knowledge of web application security standards (e.g., OWASP Top Ten, SANS/CWE Top 25)
• Experience with cloud security (AWS, Azure, GCP) and container security (Docker, Kubernetes)
• Excellent problem-solving skills and the ability to work under pressure in a fast-paced environment
• Strong communication and interpersonal skills, with the ability to influence and lead teams
• Relevant certifications such as CISSP, CEH, OSCP, or CSSLP

Desirable

• We are seeking a highly skilled and experienced Staff Application Security Engineer to take on a technical leadership role within our organization.
• You will be responsible for driving the security of our applications, mentoring a team of security engineers, and ensuring our software products are robust against security threats
• Technical Leadership:
• Lead the application security team, setting technical direction and priorities
• Mentor and guide junior security engineers, fostering a culture of continuous learning and improvement
• Conduct regular code reviews and security audits to ensure high standards of security practices are maintained
• Application Security:
• Design, implement, and maintain security measures for our software applications to protect against threats and vulnerabilities
• Understand browser based attack vectors as well as android and iOS attack vectors
• Understand cryptographic primitive and their security applications
• Perform threat modeling, security code reviews, and vulnerability assessments
• Develop and maintain secure coding guidelines and best practices for developers
• Work closely with development teams to integrate security into the software development lifecycle (SDLC)
• Incident Response and Management:
• Lead incident response efforts for application security incidents, including investigation, mitigation, and post-incident analysis
• Develop and maintain incident response plans and procedures
• Conduct root cause analysis and implement corrective actions to prevent future incidents
• Collaboration and Communication:
• Collaborate with cross-functional teams, including developers, product managers, and infrastructure teams, to ensure comprehensive security coverage
• Communicate security risks, vulnerabilities, and requirements to stakeholders effectively
• Advocate for security best practices and foster a security-first mindset across the organization
• Continuous Improvement:
• Stay current with the latest security trends, vulnerabilities, and technologies
• Evaluate and implement new security tools and technologies to enhance our security posture
• Continuously improve security processes and practices to ensure robust and scalable security solutions