Writer2 дня назад
Security engineer, application security
Зарплата не указана
РЫНОК
13 634 ₽медиана по профессии
Tech Lead / Team Lead · 356 вакансий с указанной зарплатой
5 092половина предложений: 9 708–18 1041,2 млн
Работодатель не указал зарплату — сравните с рынком сами.
Полная занятостьУдалёнка
Обязанности
- 01Build security into the DNA of our AI platform by conducting threat modeling sessions with product teams, designing secure architectures for new features, and ensuring security considerations shape product decisions from day one—not after the fact
- 02Own and evolve our application security program including establish and maintain SAST/DAST scanning in CI/CD pipelines, conducting security code reviews for critical changes, and building automation that catches vulnerabilities before they reach production
- 03Partner with engineering teams to establish and champion secure coding standards, creating reusable security patterns and libraries that make it easier for developers to build securely by default
- 04Design and recommend security features and products that help secure customer environments. You are the advocate and the vision for how we protect and secure customers.
- 05Integrate and leverage AI agents to help increase velocity for the security team and the overarching engineering org to ensure that we are proactive in minimizing risk while we build products
- 06Lead security assessments and penetration testing of WRITER's applications, AI services, and APIs, identifying vulnerabilities across our tech stack and working collaboratively with teams to remediate issues at scale
- 07Design and implement security controls for protecting data pipelines, model training environments, and customer-facing AI agents
- 08Stay ahead of emerging threats in the AI/ML security landscape, researching attack vectors specific to LLMs and generative AI, and proactively building defenses against novel risks
Требования
- 01Minimum 4 years of hands-on experience in application security engineering, with a proven track record of securing large-scale production systems—bonus points if you've worked in fast-growing startups or high-growth environments
- 02Understanding of developer experience and developer workflows for shipping features and products. You care deeply about reducing risk while considering velocity of engineers.
- 03Technical expertise in at least two programming languages (Python, Java, Go, JavaScript/TypeScript) and the ability to read and review code across multiple languages, understanding both business logic and security implications
- 04Knowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices—you know which tools to use and when automation beats manual review
- 05Excellent communication skills that allow you to translate complex security concepts into clear recommendations for both technical and non-technical audiences—you can explain why something matters and motivate teams to action
- 06A builder's mindset that looks for opportunities to automate, scale, and empower rather than create bottlenecks—you understand that security enables the business, not blocks it
- 07Alignment with WRITER's values of Connect (building strong relationships across teams), Challenge (pushing the boundaries of what's possible in AI security), and Own (taking end-to-end responsibility for the security of our platform)
Условия
- 01This role is hybrid from our New York City, San Francisco, or Seattle offices, reporting to the head of security engineering
- 02Generous PTO, plus company holidays
- 03Medical, dental, and vision coverage for you and your family
- 04Paid parental leave for all parents (16 weeks)
- 05Fertility and family planning support
- 06Early-detection cancer testing through Galleri
- 07Flexible spending account and dependent FSA options
- 08Health savings account for eligible plans with company contribution
- 09Annual work-life stipends for: Wellness stipend for gym, massage/chiropractor, personal training, etc.