Senior Application Security Engineer, Octane
$125-165k
+ Stock option package
More information about location
End-to-end digital buying experience
Job no longer available
End-to-end digital buying experience
201-500 employees
Job no longer available
$125-165k
+ Stock option package
More information about location
201-500 employees
Company mission
To connect people with their passions by making lifestyle purchases fast, easy, and accessible.
Role
Who you are
- Octane is seeking an experienced Application Security Engineer to lead and enhance our application security initiatives
- Master’s / Bachelor’s degree in Cybersecurity/Engineering preferred or significant relevant equivalent experience
- 5+ years of experience in Information Security. Prefer application security and incident response experience
- GIAC Certified Web Application Penetration Tester (GWAPT) and/or GIAC Certified Web Application Defender is preferred
- Familiar with processes such as threat intelligence, threat hunting, incident response and other threat & vulnerability processes
- Strong knowledge and understanding of application development frameworks and processes (prefer past experience as a full-stack developer)
- Experience in identifying application security vulnerabilities and addressing them in modern application technology stacks
- Experience identifying vulnerabilities in programming languages such as JavaScript (Node JS), and Python
- Experience developing automations using languages such as Python
- Hands-on experience in configuring CI/CD solutions to utilize security solutions with the aim to mature towards a well-implemented DevSecOps
- Expert knowledge of OWASP and OWASP API Top threats and remediations (should be able to recognize and mitigate security issues with manual code review)
- Familiarity with common libraries and frameworks used for mitigating common application-level threats
- Knowledge of defense-in-depth architecture as it relates to cloud and application security
What the job involves
- This role will focus on integrating robust security measures into the software development lifecycle, conducting security assessments, and guiding development teams in identifying and mitigating application security risks
- You will play a critical role in securing our applications, microservices, and infrastructure, while also fostering a security-first mindset across teams
- The preference is for this role to be hybrid based in our Dallas/Irving, Texas or NYC office, but will be open to remote candidates as well
- Review, design and integrate security into the Software Development Lifecycle processes
- Perform manual and automated security assessments against Octane applications, microservices, and application components
- Perform threat modeling and risk assessments on existing and proposed projects
- Analyze existing processes and technologies used by development, data and product teams and embed security practices
- Partner with development and QA teams to ensure application security risks are identified and mitigated using appropriate security controls
- Test applications for security vulnerabilities using SAST/DAST/SCA solutions
- Provide pragmatic recommendations to remediate security concerns in the code and misconfigurations
- Triage and prioritize security incidents as needed as part of the incident response processes
- Own application security education and training across development, data and QA teams
Our take
Octane is revolutionizing the financing process within the powersports industry. The company's online platform offers streamlined online financing options and has significantly improved customer experience through its technology-driven solutions.
In addition to its core focus, Octane has expanded its offerings to include recreational vehicles, tractors, trailers and electric vehicles. The company collaborates with over 30 original equipment manufacturers (OEMs) and has originated more than $4 billion in loans through its in-house lender.
Octane's impressive flurry of funding rounds in 2024 underscores strong confidence in its business model and future growth. This capital has enabled the company to expand into more markets, including the auto market with its captive-as-a-service solution for dealership groups.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- Medical, Dental, Vision: Generous coverage for you and your dependents
- Generous Parental Leave: As your family grows, ours does too
- 4+ Weeks of PTO: Enjoy your time off & have the encouragement to take it!
- Education Stipend: Up to $3000/year for continuing education
- Competitive 401(k): We match 100% of the first 3% you contribute and 50% of the next 2%, for a total match of up to 4%
- Donation Matching: Octane matches charitable gifts from employees year-round
- Powersports Safety Benefit: Up to $500/year for powersport safety equipment
- Gympass Membership: We offer flexible memberships to thousands of gyms, studios, and apps to support your wellness journey
Company HQ
Midtown South, New York, NY
Leadership
Mark Davidson
(CRO & Co-founder)Previously co-founded Cheggin where they served as the CEO. They also co-founded oDigger and CaptureSEO and worked as a Marketing Manager at Egos Marketing.
André Gregori
(Head of New Verticals Products & Co-founder)Head of Dealer Products at Octane Lending. Previously co-founded Cheggin.
Mark Garro
(VP of Engineering & Co-founder)Senior Director of Engineering at Octane Lending. Previously served as the CTO at Cheggin and ScholarLocker. They also worked as a Software Engineer at VIVANA Wellness.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 3 more jobs at Octane