Senior Software Engineer

Summary

Join Lively as a Senior Software Engineer specializing in security and contribute to securing our investment and financial products. You will be responsible for implementing and maintaining security measures, working with modern web technologies, and collaborating with the Head of Security and other team leads. This role requires strong experience in information security, web application development, and cryptography. The position is based in Portugal, requiring fluency in English and close collaboration with US-based employees. While the job description doesn't specify all benefits, it mentions competitive salaries, stock options, and various insurance coverages.

Requirements

• 5+ years of experience working with information security and web applications (Node preferred)
• Bachelor's degree in computer science, or equivalent
• Fluent in both written and spoken English, with strong communication skills
• Experience and proficiency with information security frameworks and approaches like CIS and NIST
• Familiarity with PKI, encryption, mutual TLS, cipher suites, and other network- and disk-level data protection protocols, tools, and configurations
• Experience performing software security reviews and implementing security solutions at the business division level
• Experience with application security best practices and familiarity with common vulnerabilities (e.g., SQLi, SSRF, race conditions, access controls, privilege escalations, etc.)
• Strong knowledge in software design and familiarity with design patterns
• Experienced with TypeScript, Javascript, and Node.js
• Strong fundamental understanding of relational DataBase (Postgresql, Mysql)
• Strong debugging skills and not afraid of getting hands dirty in other areas
• Strong product delivery records
• Experience with Agile/Scrum development methodology
• Proven experience on building backend services with high availability and scalability requirements

Responsibilities

• Work to ensure Lively is constantly utilizing the most recent standards, tools, and tech to ensure proper defense in depth
• Help the product and engineering org discover and mitigate information security risks for new products and features
• Work with the Head of Security to further refine infosec policies and their controls
• Identify and lead the secure design and implementation of new security initiatives and improvements to the existing web application
• Opt for buy-in and understanding from stakeholders and teams when making decisions to help foster our open door approach to infosec
• Help ensure our application is free of vulnerabilities by keeping third party dependencies patched
• Help identify, investigate, and mitigate security incidents involving our web application
• Assist with security incident postmortems and root cause analysis
• Identify and model new and existing threats to our web application
• Security mentorship and outreach to internal development teams
• Review high-risk changes to the web application
• Occasionally answer web application security questions from partners, auditors, and customers
• Implement features and functionality with clean and maintainable code
• Take pride in software quality through rigorous functional testing and writing automated unit tests
• Troubleshoot production issues, provide resolutions and recommendations for improvement

Preferred Qualifications

Experience working in regulated industries which have various security controls implemented including strict change management is a plus

Benefits

• Competitive salaries
• Stock options
• Medical, dental, vision, life and disability coverage
• An HSA with employer contribution
• FSA
• Paid parental leave
• Medical travel benefits
• A 401k plan
• Flexible vacation policy
• Lifestyle spending accounts