Senior Application Security Engineer

Summary

Join Glassdoor as a Sr Application Security Engineer to improve the company's application security posture, manage the public bug bounty program, participate in code and product security reviews, and help developers integrate security into their workflows. This role requires 5+ years of experience in web application penetration testing or a security-focused application development role.

Requirements

• A commitment to add to our culture of DEI
• 5+ years of experience in web application penetration testing or a security-focused application development role is a must

Responsibilities

• Be an advocate for application security within the organization
• Help develop and maintain a risk-based application security program based on a well-defined application security framework
• Enhance and manage Glassdoor’s public bug bounty program, application security tool stack and automated security checks in the CICD pipeline to optimize vulnerability and misconfiguration detection
• Find common patterns and themes within application vulnerabilities and work with Engineering teams to address the root causes
• Participate in the strategic decisions related to the requirements, design, implementation, and operations of application security framework, processes, and technology
• Execute security-focused code, architecture and integration reviews
• Coordinate or conduct penetration testing and drive remediation efforts to completion
• Keep abreast of the latest security issues and technologies
• Own and improve process and procedural documentation
• Participate in on-call rotation (nights and weekends) for Security Operations alert response
• Assist with daily activities and functions of the Security team to maintain security posture as well as policy and compliance commitments

Preferred Qualifications

AWS Security, CISSP, CEH, GWEB, GCIH or equivalent certifications are preferred

Benefits

• Base salary range: CAD $92,000.00 - $115,000.00
• Annual Bonus Target: 10%
• Generous Restricted Stock Units (RSU)
• Open Paid Time Off policy, in addition to 15-20 paid company holidays/year