Remote Security Engineering Lead

Summary

Join a fast-growing company with a strong mission and vision that puts people first, as we build the foundation of the security stack at Step.

Requirements

• 8+ years relevant work experience in the Information Security field
• Well versed in Cloud Infrastructure and Mobile Application Security
• Experience advising product teams on how to address a broad set of security and privacy challenges
• Experience shipping code in consumer-facing products, preferably across both backend and mobile domains
• Ability to prioritize and communicate impact for the security projects on the Step Engineering roadmap
• A desire to help build the product, not just poke holes in it

Responsibilities

• Build the security engineering program going from zero to one
• Your team will assess risks to our customers across a wide range of product and technology areas, including mobile, backend infrastructure, key management, account recovery, third party integrations, authentication, and privacy
• Be the subject matter expert for the entire security stack here at Step, including application security, building thread models, overseeing penetration testing, and effectively balancing security risk with product development initiatives
• Identify key security considerations that we need to address as we're growing our products
• Own security-critical systems at Step. Includes but not limited to authentication, access control and encryption services
• Establish secure coding practices across the engineering team
• Work with engineering and XFN teams to help architect solutions that are inherently secure

Benefits

• Competitive salary based on experience
• Full medical and dental benefits
• High potential for growth
• Stock in an early-stage startup
• Flexible WFH and vacation policy
• Paid parental Leave
• Employee referral program
• 401K plan