Software Engineer, Application Security

We’re looking for talented and motivated application security engineers with 7+ years of experience. As part of our team, you will build tools that will help our product engineers effortlessly write code that keeps our customers’ information secure. If you’re interested in building secure software with far-reaching effects in our modern economy, join us!

Our customers put a lot of trust in us to be good stewards of this information. As a result, protecting our clients’ PII and PHI is one of the top considerations in anything we do at ZarMoney.

Here’s what you’ll do day-to-day:

• Work with our product engineers to keep our web applications secure.
• Develop easy-to-use tools and light-weight processes that will help our engineers seamlessly write secure code.
• Be involved early in the software development life cycle so that security is built into our architecture.
• Train engineering teams in secure coding best practices.
• Research the latest threats and exploits and help our engineers secure the product against those threats.
• Automate and integrate security into CI/CD pipelines, such as static code analysis and dynamic code analysis.
• Run internal red team exercises.
• Coordinate and manage 3rd party pen-testers and bug bounty programs.
• Ensure proper management, encryption, and separation of secrets and keys.
• Share our security learnings and best practices with the outside world, so we can make the world more secure.

Here’s what we’re looking for:

• 7+ years experience in an application security role.
• Familiarity with cloud environments like Microsoft Azure.
• Familiarity with dynamic languages and modern web development frameworks. 
• A hands-on engineer who cares deeply about both the technological and social aspects of building a secure organization
• Ability to partner well with cross-functional stakeholders.
• Always thinking about attack vectors in which PII and PHI can be compromised.
• Relevant security certifications (OSCP, CEH, GPEN, CISSP, etc.) are a plus.