Senior Product Security Engineer, Red Canary
$138.4-170k
+ Bonus eligibility and equity depending on experience
SaaS threat detection and security operations
Be an early applicant
SaaS threat detection and security operations
201-500 employees
Be an early applicant
$138.4-170k
+ Bonus eligibility and equity depending on experience
201-500 employees
Company mission
To make security stronger, safer, and more comprehensive.
Role
Who you are
- At least 5 years experience in securing enterprise-grade web applications and services with demonstrated expertise in threat modeling and attack surface analysis
- Solid understanding of common languages such as Ruby, Javascript, Go, etc
- Strong experience in web application security issues and standards (ex. OWASP Top 10, SANS Top 25, etc.)
- Understanding and experience with securing public cloud deployments, including AWS and/or Azure, and serverless architecture
- Familiarity with CI/CD tools and processes, such as GitHub, Travis CI, CircleCI, Docker, and Kubernetes
- Strong foundation in core information security principles and concepts (encryption, authentication, etc.)
- Experience with automated application security tools and technologies (SAST, DAST, SCA etc.)
- Excellent communication skills and the ability to explain sophisticated security topics in simple terms
What the job involves
- Delivering excellent, secure software is paramount to Red Canary's mission
- Some of the best security teams in the world depend on our software to protect their organizations, and in turn we expect the highest standards of security for our platform
- Our Senior Product Security Engineers collaborate across product teams to mature our product security program and help ensure secure outcomes for software development at scale
- Under your guidance, the Red Canary product security model will be viewed as the standard by which all other security providers are measured
- The program you will join enables rapid development of our product features for our customers, by providing repeatable secure patterns and seamless guardrails
- A continuous improvement mentality is crucial for success
- In this role you’ll get the opportunity to craft and implement security standard methodologies at every stage of the development lifecycle, from design through production
- Not only will you have the chance to uncover exploitable bugs in software, but more meaningfully, you’ll be an integral piece of getting them fixed as early in the process as possible
- Embed with the product teams and attend regular stand-ups and planning meetings and build positive relationships with key partners
- Serve as the security authority on your product, ensuring the corporate security controls are working as designed, that security requirements are provided to the team before coding begins, and that vulnerabilities are being fixed within their SLAs
- Ensure s-SDLC controls are embedded in your product and serve as control owner for a subset of these controls, mentoring other team members
- Engage in application and domain-specific threat modeling, and attack surface analysis and reduction
- Work alongside engineers, performing peer review and mentoring as needed
- Assist in continuous improvement efforts and serve as a resource for more junior members
Application process
- The application deadline is December 13th, 2024
Our take
Red Canary is a leading provider of managed detection and response (MDR) services, dedicated to protecting organizations from threats across cloud workloads, identities, SaaS applications, networks and endpoints. The company offers advanced threat intelligence and 24/7 monitoring to help security teams reduce risks and respond effectively.
Recently the company introduced new features and updates to further enhance its services. The company expanded support to Amazon Web Services, Microsoft Azure, and Google Cloud Platform, and partnered with clients to modernize Security Operations Centers using Microsoft Sentinel, demonstrating Red Canary's commitment to improving security operations and maximizing existing security investments.
Red Canary's success is evident from its impressive client base and industry recognition. Protecting over 2.5M endpoints with a 99% threat accuracy and maintaining a customer satisfaction rating of around 99%. The company now plans to expand its impact to reach over 150,000 professionals through educational initiatives.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 5 rounds)
Feb 2021
$81m
SERIES C
Apr 2019
$34m
EARLY VC
Total funding: $129.9m
Company benefits
- Red Canary offers a 100% paid plan option for medical, dental and vision for you and your dependents. No waiting period
- All new hires are eligible for benefits as of their first day
- Take the time you need to recharge including vacation, sick, bereavement, jury duty, and holidays
- Red Canary offers a variety of plans to fit you and your dependent specific needs including FSA, HRA and HSA, with employer funding to offset out of pocket health care expenses
- With 60% remote workforce, Canaries can work virtually from almost anywhere in the US
- Full base pay to bond/care for your new child
Company values
- We are relentless
- We always deliver quality
- We are kind and authentic
- We do what’s right for our customers
Company HQ
Union Station, Denver, CO
Articles
Leadership
Brian Beyer
(CEO)Having studied at Purdue University, they worked as a Software Development Lead at Northrop Grumman and Solidyn for almost 4 years. They left Kyrus Technology in January 2014 to co-found Red Canary.
Chris Rothe
(CTO)They started their career as an IT Specialist, before spending over 3 years at Lockheed Martin as a Software Engineer and VP of Technology at Soidyn Solutions. Following 9 months at Kyrus, they co-founded Red Canary in January 2014.
Share this job
View 16 more jobs at Red Canary