Staff Application Security Engineer
The Role
You’ll report into the Director, Information Security and build relationships with technology stakeholders. You’ll leverage your knowledge of secure code practices and payment systems to identify and remediate application vulnerabilities. This individual contributor role will innovate for our AppSec team, increase our AppSec posture and enable our engineers to code safely.
What You Should Have
- 6+ years of application or product security inclusive of reviewing Python code
- Experience with innovating and delivering solutions related to vulnerability management
- Deep knowledge of AWS and Lambda security architecture and AWS Control Tower
- Strong understanding and adoption of AI technologies
- Bachelor’s degree in Computer Science or Engineering highly preferred
Tools We Use
- GitHub Suite (Advanced Security, Actions, Copilot)
- Python
- Terraform
- AWS Lambda, DynamoDB, S3, SNS, SQS, IAM, VPCs
Location
The role offers location flexibility, however, if you’re based in the Washington, D.C., Austin, Chicago, or NYC metropolitan regions, in-office attendance is required on a hybrid basis.
Compensation
The US base salary range for this full-time position is $210,000 - $230,000 + equity + benefits. The final starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions.
Benefits
- Medical, dental, and vision coverage starting on Day 1
- Equity (ISOs)
- 401(k) program
- Familial planning programs + paid parental leave
- Physical fitness and wellness memberships
- Emotional and mental health support programs
- Unlimited PTO + 10 paid federal holidays + our annual, week-long Winter Break
- Flexible work environment
- Lunch reimbursement for in-office employees
- Employee Resource Groups
- Learning and Development stipend
Notice To Recruiters And Placement Agencies
This is an in-house search with a dedicated recruiter. Please do not submit resumes to any person or email address at Upside. Upside is not liable for, and will not pay, placement fees for candidates submitted by any party or agency other than its approved recruitment partners.