Software Engineer, Security

San Francisco, CA. Posted 26 months ago

The role

You will develop and maintain the security foundation of the platform. You will design security measures for cloud infrastructure, applications, and data while integrating security practices into the software development lifecycle.

What you will do

Design, implement, and manage security measures for cloud infrastructure, applications, and data.
Collaborate with engineering teams to integrate security practices into the software development lifecycle.
Stay up-to-date on security threats, vulnerabilities, and mitigation strategies.
Conduct security code reviews to identify and remediate vulnerabilities.
Develop and implement automated security testing procedures.
Respond to security incidents and participate in incident response procedures.
Document security processes, procedures, and best practices.
Lead security awareness and training programs.

Required qualifications

Minimum 5+ years of experience as a Security Engineer with a focus on product security.
Strong background in securing cloud-based environments (AWS, Azure, GCP).
Understanding of Infrastructure as Code (IaC) security practices.
Strong coding skills with proficiency in TypeScript and Python.
Expertise in application security, network security, security operations, and incident response.
Experience with container security (Docker Security, Kubernetes Security).
Familiarity with a wide range of AWS services, including VPC, EC2, Lambda, Amazon RDS, and S3.
In-depth knowledge of CI/CD pipeline tools and practices.
Knowledgeable in security compliance frameworks and regulations (e.g., ISO 27001, SOC 2, GDPR).
Experience with security assessments and third-party audits.
Proficiency with security tools and technologies, such as firewalls, IDS/IPS, vulnerability scanners, WAF, SIEM, and encryption solutions.
Demonstrated ability to influence security strategies and drive improvements within a team.

Nice to have

Experience in GitHub Actions or Jenkins

About the company

Factory builds the platform for self-improving software development to help enterprise engineering teams become autonomous software factories.