Senior Software Engineer, Security

🔥 il y a 23 heures

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

AssemblyAI

Site WebLinkedInTous les Emplois

51 - 200 employés

💼 Conseil

📣 Marketing

📦 Logistique

💰 €30 000 000 Series B en 2022-07

Consulting • Marketing • Logistics

AssemblyAI est une entreprise spécialisée en intelligence artificielle vocale (Speech AI), visant à développer des modèles IA de pointe capables de transcrire et de comprendre le langage humain. Nos clients, tels que CallRail, Fireflies et Spotify, choisissent AssemblyAI pour créer de nouvelles expériences et produits innovants basés sur les données vocales.

Description

• Conduct threat modeling and security design reviews for new features, services, and architectural changes • Perform secure code reviews focused on authentication, authorization, input handling, secrets management, and data protection • Deploy and maintain SAST, SCA, DAST, secret scanning, IaC scanning, and CI/CD security guardrails • Promote secure-by-default libraries, frameworks, paved-road patterns, and developer guidance • Partner with platform engineering on AWS hardening, Terraform reviews, network segmentation, and environment isolation • Contribute to security incident investigation, root cause analysis, and post-incident hardening • Drive vulnerability triage, prioritization, remediation tracking, and metrics reporting • Respond to customer and vendor security questionnaires, RFP security sections, and trust-and-safety inquiries with sales and legal • Support SOC 2, ISO 27001, PCI 4.0, and other compliance audit cycles • Monitor and respond to endpoint, cloud, and application security alerts • Execute user access reviews, IAM hygiene tasks, and RBAC maintenance • Maintain security runbooks, process documentation, and operational playbooks; build automation where possible

🎯 Exigences

• 5+ years of experience in security engineering, security operations, or a related combined role • Hands-on experience with SOC 2, ISO 27001, or PCI compliance audit cycles • Strong application security fundamentals, including threat modeling and secure code review • Familiarity with OWASP Top 10 and CWE vulnerability classes • Experience with SAST, SCA, DAST, secret scanning, or IaC scanning • Working knowledge of AWS infrastructure and services, including IAM, VPC networking, and security configurations • Familiarity with infrastructure-as-code and CI/CD pipeline security; Terraform preferred • Proficiency in Python and ability to read backend service code • Strong written communication skills for audit documentation, security questionnaires, policies, and runbooks • Comfort using AI-assisted development tools such as Claude Code or Copilot • Nice-to-have: AI/ML security, endpoint and cloud security tooling, SIEM detections, vulnerability management, security incident handling, startup experience, or security certifications

🏖️ Avantages

• Competitive equity grants • 100% employer-paid benefits • Fully remote flexibility • 401k match up to 4% for all US-based full-time team members