Senior Application Security Engineer, Drata
$133.5-206.2k
+ Stock
Security and compliance automation
Posted today
Security and compliance automation
501-1000 employees
Posted today
$133.5-206.2k
+ Stock
501-1000 employees
Company mission
To help companies earn and keep the trust of their users, customers, partners, and prospects.
Role
Who you are
- Bachelor's degree in Computer Science or related field (or equivalent experience)
- 5+ years of experience in application security, software development, or related field
- Strong knowledge of secure coding practices, web application security, and threat modeling
- Experience with common web application vulnerabilities and remediation techniques
- Strong knowledge of web application development frameworks and technologies including REST, Node, Javascript, Typescript, and React
- Experience with security testing tools such as Burp Suite and OWASP ZAP
- Experience with application observability tools such as Datadog
- Strong problem-solving and analytical skills
- Strong verbal and written communication skills
What the job involves
- Drata’s Senior Application Security Engineer is Drata’s full time in-house resident hacker, responsible for identifying and mitigating application and product security of Drata’s Trust Management Platform.
- This scope includes identifying and mitigating application and product security risks, implementing application and product security controls, providing guidance to development teams to help ensure secure coding practices, and directly assisting in changes needed to mitigate these risks and vulnerabilities
- Be Our Resident Hacker and Internal Red Team — Hack All The Things! Conduct security assessments of applications, including code reviews, penetration testing, and red team exercises. Work with external partners to accomplish these things as part of annual and ongoing assessments
- Set Application Security Expectations: Develop and implement security policies, standards, guidelines, and procedures to ensure the safety and protection of Drata’s data, applications, platform, and supporting systems. Collaborate with development teams to integrate security into the software development life cycle (SDLC)
- Build Security Into Everything: Work closely with internal teams to ensure application security is integrated throughout the software development lifecycle, system administration, and business operations. Collaborate with cross-functional teams to ensure security compliance across all departments and systems. Work with Drata’s product and engineering teams during design to help ensure security is baked into the application
- Vulnerability Management: Conduct regular vulnerability assessments, and identify and mitigate security vulnerabilities in applications in a timely manner
- Application Security Incident Response: Lead investigation and response efforts for application-level security incidents
- Foster Trusted Partnerships Across Engineering: Build strong, collaborative relationships with application and platform teams. Act as an embedded security partner—offering practical, empathetic guidance to drive secure development without blocking innovation
- Deploy and Advance Application Security Capabilities: Continuously research, evaluate, and implement cutting-edge application security technologies
- Reporting: Prepare and present regular application security reports to management. Communicate application security vulnerabilities and remediation efforts to relevant stakeholders
Our take
Traditional manual compliance workflows are tedious, error-prone and extremely hard to scale, which presents special difficulties for rapidly growing companies in maintaining strong data security. Drata enables companies to manage compliance easily, by automatic monitoring and evidence collection, building a single picture of risk across the company.
The company has several competitors offering compliance automation solutions, including Vanta and Secureframe , but Drata is unique in automating the tasks themselves rather than generating notifications for teams to action. This approach has garnered Drata a client base of thousands of companies including bambooHR, Notion and Abnormal.
Drata has grown swiftly since its 2020 founding. Iconiq Growth and GGV Capital have led Drata's impressive funding rounds. It intends to use its influx of cash to invest heavily in research and development, and to roll out new features for auditors and startups.
Freddie
Company Specialist at Welcome to the Jungle
Insights
90% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Dec 2022
$200m
SERIES C
Nov 2021
$100m
SERIES B
Total funding: $328.2m
Company benefits
- 100% coverage for medical, dental, and vision
- $500 annually towards personal development opportunities
- Unlimited vacation policy for strong, fully charged batteries
- Flexible hours and work from home (especially these days!)
- Reach your financial goals while reducing your taxes
- Pre-tax savings plans for healthcare and dependent care
- Work From Home Stipend
- Learning Enrichment Stipends
- 16 weeks fully-paid parental leave
- 401K Retirement Plan
Company HQ
University City, San Diego, CA
Leadership
Adam Markowitz
(CEO)Previously VP & GM at Instructure. Founder & former CEO of Portfolium. Has worked in Mechanical and Aerospace Engineering.
Daniel Marashlian
(CTO)Former Technical Advisory Board Member at the National University. Previously Senior Director Of Engineering at Instructure. Co-founded Portfolium and RapidEngage.
Troy Markowitz
(COO)Advisor at Knack and former Contributor to Forbes. Previously the VP of Strategy, Growth Markets at Instructure. Prior experience in Business Development.
Share this job
View 17 more jobs at Drata