Senior Application Security Engineer

Summary

Join Loop as a Senior Application Security Engineer and ensure the security and integrity of our systems and data. Collaborate on security projects, identify and communicate potential risks, and implement effective security measures. Maintain a secure environment by proactively monitoring and remediating vulnerabilities, responding to security incidents, and conducting regular security audits. Participate in engineering team activities, share your expertise, mentor team members, and advocate for security within the organization. We offer a blended work environment with flexibility to work from our HQ office, a hub location, or remotely. The role involves working with various technologies including Vue.js, Node.js, PHP/Laravel, and AWS Cloud. A competitive salary and benefits package are offered.

Requirements

• Minimum of 7 years' combined experience in application development or devops, and security engineering
• Solid knowledge of common appsec vulnerabilities and their prevention (e.g., OWASP Top 10, SANS Top 25)
• Experience in security testing, including code review, SAST, DAST, and vulnerability scanning
• Familiarity with incorporating security measures into all phases of software development, from initial concept to final launch including “Shift Left” security
• Experience with SIEM, WAF, Risk Management Platforms, SAST/DAST or similar security tools
• Deep understanding of cloud security best practices and challenges, with specific expertise in AWS security services and architectures or equivalent
• Must be proficient in at least one scripting language (e.g., Python, Bash) to automate security tasks and integrate security tools
• Skilled in identifying, evaluating, prioritizing, and monitoring the remediation of security vulnerabilities
• Proven experience in handling security incidents, including identification, containment, and remediation
• Ability to clearly communicate technical security concepts to both technical and non-technical audiences, and to collaborate effectively with development, operations, and other teams
• Ability to analyze security issues, identify root causes, remediate and/or recommend effective solutions

Responsibilities

• Participate in security projects, delivering secure and well-documented work
• Support SOC2 compliance and Pen Testing initiatives
• Deeply understand how to secure networks, applications, infrastructure, and data
• Hands-on expertise in some secure software development lifecycle areas with organizational support needed for others
• Provide technical guidance and identify automation opportunities
• Utilize monitoring and vulnerability scanning tools to identify security concerns within the production environment and systems, remediate findings, or communicate them to the relevant team for triage
• Quickly learn the team's tech stack, security tool ecosystem, and environment
• Manage security projects independently, escalating when needed
• Meet project deadlines and investigate automation opportunities
• Build relationships with engineers
• Give actionable security feedback to developers
• Lead security discussions
• Prioritize security issues based on risk assessments
• Own and drive security incident response

Benefits

• Medical, dental, and vision insurance
• Flexible PTO
• Company holidays
• Sick & safe leave
• Parental leave
• 401k
• Monthly wellness benefit
• Home workstation benefit
• Phone/internet benefit
• Equity