Staff Application Security Engineer

Summary

Join Forma as a Staff Application Security Engineer and contribute to fortifying our security framework, ensuring the integrity and confidentiality of our data and systems.

Requirements

• Bachelor’s or Master’s degree in Information Systems, Computer Science, or a related field
• At least 8+ years of experience in security engineering, with a solid understanding of security protocols, cryptography, and application security
• Experience with cloud security architectures and solutions, particularly in AWS, Azure, or Google Cloud environments
• Proven ability to work with network diagnostic, monitoring, and analysis tools
• Strong problem-solving skills and the ability to work under pressure in a fast-paced environment
• Professional certifications such as CEH, OSCP, OSWE, etc

Responsibilities

• Conduct regular application, system and network security penetration tests and audits to identify potential vulnerabilities
• Develop and implement security enhancements for Forma’s cloud-based infrastructure, focusing on continuous improvement of our defenses against threats
• Collaborate with the engineering teams to integrate security practices into the development lifecycle and to ensure secure coding practices are followed
• Manage and tune security tools and technologies such as firewalls, intrusion detection systems, and encryption
• Respond to and investigate security breaches or incidents, managing the resolution process and mitigating any impacts
• Participate in the creation and maintenance of security policies and procedures, ensuring they meet compliance requirements like SOC2 and ISO 27001
• Educate and train staff on security protocols and best practices, fostering a culture of security awareness within the organization

Benefits

• Remote-first working environment
• Medical, dental and vision insurance plans
• Employee wellness program
• One-time home office stipend
• 401(k) savings plan
• Flexible PTO policy
• 12 weeks Parental Leave + 4 additional weeks for the Birthing Parent