Build the world's fastest Identity and Checkout products
Company Mission
Our mission is to make buying online faster, safer and easier for everyone. Fast Login and Fast Checkout enable a one-click sign-in and purchasing experience that makes it easier for people to buy and merchants to sell. The company’s products work on any browser, device or platform to deliver a consistent, stress-free purchasing experience. Fast is entirely consumer-focused and invests heavily in its users’ privacy and data security. Headquartered in San Francisco but open to a globally remote workforce, we are a founders-led, privately held company funded by Stripe, Index Ventures, Susa Ventures and other world-class investors.
We are committed to diversity and inclusion, and demonstrate our values through equitable pay, fantastic benefits, and access to all reasonable accommodations.
Summary
We are looking for a hands-on individual with an ethical security mentality to join us in a Senior Application Security Engineer Role. You will assist with the build out of Fast’s application security program, and lead the way on architecting, developing and deploying application security tools and technologies to protect the Fast’s platform and backend infrastructure.
Does this sound like you? We want to talk to you!
Role
Develop the secure SDLC process at Fast and perform static security code analysis (SAST) of the Fast code base regularly and communicate with engineering teams and leadership
Perform dynamic application security testing (DAST) using open source and commercial tools
Perform threat modeling on existing and upcoming feature-set in the Fast platform
Work closely with the DevOps team to design threat response workflows
Manage the bug bounty program at Fast
Use external independent application security testing tools
Identify and address all vulnerabilities originating from third party dependencies
Work with developers to insure code complies to security procedures
Requirements
Bachelors in Computer Science or related field, or equivalent experience
5+ years in a security engineering or operations role
Solid understanding of applied cryptography, web security, TLS/SSL, web authentication protocols such as OAuth/SAML
Experience in using scripting languages e.g. Python, Perl, PHP, Ruby to automate tasks and manipulate data
Experience with developing threat models (STRIDE, DREAD, etc.)
Comfortable with security tools like Burp Suite, OWASP ZAP, CheckMarx, Veracode, MetaSploit, App Spider etc.
Bonus
Experience with automation tools like Ansible, Chef, Puppet, Jenkins
Experience with automated application testing tools/frameworks e.g. Selenium, SonarQube
Experience with Web Application Firewalls (WAF)
Benefits and Perks- Because People Matter
Comprehensive insurance (paid 99% by the company) with no deductible, and 10 dollar copays
Globally remote with flexible work schedules to fit your needs
Generous paid parental/family leave for all caregivers- up to 12 weeks
401k with match up to 4%
Equity grant
People-focused PTO that you determine- time off is there when you want it, when you need it
Frequent inclusive events scheduled to allow everyone to express their voice (or dance skills)
Monthly exercise and internet stipends---and snacks
