Sr. Product Security Engineer

About the role

The Security Engineering team is a trusted partner throughout the organization who work hard to make Betterment the most secure place for our customers’ money. We do this by building tools for our development teams, improving the security and integrity of our systems, and adding monitoring and visibility into our services. This helps us move faster and smarter, all while done within a highly regulated and secure environment.

Responsibilities

• Lead and collaborate on product security initiatives strengthening our engineering practices
• Write and review customer facing code to resolve security concerns alongside product development engineers
• Conduct threat modeling exercises, architecture reviews, and offensive security engagements with product teams
• Innovate with modern cloud technologies to secure systems such as CI/CD, sensitive data storage, mobile design, front end web services, and more
• Provide mentorship and education for security and software engineering excellence

Requirements

• 5+ years of experience building software
• Deep experience and understanding of securing modern web apps (OWASP top 10, CWEs, and language specific application security issues)
• Experience working in a product setting where the needs of the business and users must be weighed against security requirements
• Experience with exploiting common security vulnerabilities and fixing them
• Experience building high-availability distributed systems and services with any Object Oriented Programming language
• Experience with the Linux command line interface
• Experience with securing AWS cloud infrastructure (EC2, RDS, S3, VPCs)
• Experience with any of these technologies is a plus: GraphQL, React, CircleCI, Kubernetes, Terraform, Postgres

Qualifications

• Passionate about our mission to empower people to build wealth with confidence and ease
• Willingness to work in a hybrid NY-based position (four days/week in-office, with no required office days during the summer and winter holidays)

Skills

• Strong problem-solving and analytical skills
• Excellent communication and collaboration skills
• Ability to work independently and as part of a team
• Knowledge of security principles and practices
• Experience with modern web app security frameworks and tools
• Experience with cloud computing platforms and technologies

Benefits

We offer a competitive suite of benefits, including medical, dental, and vision coverage; life and AD&D insurance; short- and long-term disability; infertility support and WPATH-aligned transgender health benefits; an Employee Assistance Program (EAP); transit benefits and FSA and HSA options.

Pay

New York City: $175,000-205,000

Schedule

Hybrid NY-based positions (four days/week in-office, with no required office days during the summer and winter holidays).