Application & Product Security Engineer, ID.me
$191.2-254.9k
Office located in Mountain View, CA
Digital identity verification platform
Open for applications
Digital identity verification platform
501-1000 employees
Open for applications
$191.2-254.9k
Office located in Mountain View, CA
501-1000 employees
Company mission
To make the world a more trusted place by delivering the highest level of security with the least amount of friction at the lowest possible cost.
Role
Who you are
- If you love innovation, here's your chance to make a career of it by advancing the digital identity ecosystem
- 7+ years of experience in information security or equivalent experience
- 5+ years of experience in hands-on application and product security disciplines or equivalent experience
- Experience with cloud technologies (ie AWS, GCP, and/or Azure)
- Experience with threat modeling, systems analysis, and/or security design reviews
- Excellent written and verbal communication skills
- Understanding of application and product architectures, scripting based programming languages, web application stacks, and general approaches to implementation of an SDLC
- Demonstrate excellent judgment in prioritizing security efforts to mitigate the appropriate risks
- Ability to identify, analyze, and explain the present or future needs for proposed security initiatives to senior management
- Ability to influence with empathy and compassion
- Bonus: Experience with CI/CD practices and platform tools (Jenkins, CircleCI, Github etc)
- Bonus: Strong background with containers and orchestration technologies (Docker, Kubernetes, Helm)
- Ideal candidate will thrive in our culture if they have a passion for:
- Building quality products with a mindset on safety and security
- Operating in a fast-moving and high-growth environment
- Working as a team player with an entrepreneurial work ethic
- Security, learning and continuous improvement
What the job involves
- We are seeking a talented Senior Application and Product Security Engineer who enjoys the challenges of planning, implementing, and upgrading security measures and controls, to include: Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), API security, penetration testing, and supporting an expanding bug bounty program
- This team owns the end-to-end security of ID.me’s applications and products. Our engineers use their passion for security to navigate a fast-paced, ambiguous environment
- Identify, and support the deployment of a robust application security testing tooling in support of the application lifecycle of ID.me products
- Manage and optimize the application security testing suite in support of reducing vulnerabilities that are introduced into the ID.me production environment
- Support the expanding bug bounty and application penetration testing efforts across ID.me
- Participate in activities to support the integration of security controls throughout the SDLC
- Lead design reviews of new applications and products
- Lead security testing efforts against our applications, including code reviews, black/white box testing of applications, and maintaining a continuous testing methodology
Our take
ID.me is a digital identity verification platform that simplifies how individuals prove and share their identity online. From identity proofing, authentication, and group affiliation verification the company’s services are highly scalable, as organizations across all sectors benefit from the type of technology provided by ID.me.
While there are a number of identity verification platforms in the space, ID.me has secured a considerable market share. It's formed partnerships with 31 states, multiple federal agencies, and over 500 name-brand retailers, resulting in over 100 million users - and over 70,000 individuals joining every day.
The company has raised significant funding over the years. While the intended use for new capital has yet to be specified, ID has been focusing efforts on improved customer experiences, operational enhancements, and product updates in order to maintain its competitive edge.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
Company
Funding (last 2 of 14 rounds)
Apr 2023
$132m
SERIES D
Mar 2021
$100m
SERIES C
Total funding: $287.4m
Company benefits
- Company-Sponsored Medical, Dental, and Vision Plans for You and Your Family
- Paid Parental Leave
- Generous Paid Time Off
- 401K With Employer Matching
- Company-Sponsored Life Insurance
- Employee Equity Incentive Plan
- Remote Opportunities
- Multiple Lounge Areas and Game Room
- Numerous Mental Health Resources
Company values
- Make something better every day
- Inspire people with your passion
- Treat each customer like your favorite family member
- Own your mistakes so you can learn from them
- Details are everything
- Communicate like a scientist
- Don't be a jerk
- Always compete
- Be truthful (even when it's hard)
- Ask questions like a five-year-old
Company HQ
Tysons, VA
Articles
Leadership
Blake Hall
(CEO)Current Advisor at several companies, including AgentHero and Boomtown!. Former Army Officer in the U.S. Army.
Tanel Suurhans
(CTO)They have also served as the company's EVP of Technology in conjunction with being CTO. Former Software Engineer at PerfectLine and AS Delfi.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 20 more jobs at ID.me