Security Engineer II

🕒 5 days ago

🇺🇸 United States – Remote

💵 $109.5k - $147k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Spotnana

WebsiteLinkedInAll Job Openings

201 - 500 employees

✈️ Travel

💼 Consulting

🚗 Transport

Travel • Consulting • Transport

Spotnana is a technology company revolutionizing the travel industry through its Travel-as-a-Service platform. This innovative platform offers businesses and leisure travelers a comprehensive suite of services including online booking, travel management, and real-time analytics. Spotnana's offerings are designed to enhance travel experiences, enabling self-service trip changes and integrating with various service providers for a seamless journey. The company emphasizes sustainability and cost savings, catering to corporations and travel management companies seeking modern solutions that break away from traditional travel technology limitations.

📋 Description

• Conduct application-level security assessments, including threat modeling, code reviews, and penetration testing • Assess internal tools and external web and mobile applications • Provide guidance for bug fixes identified through customer reports, internal testing, tools, and external penetration tests • Incorporate AI tools to accelerate detection and remediation of application security vulnerabilities • Develop API security best practices • Implement SAST, DAST, RAST, IAST, and related tools to identify security bugs earlier in the release cycle • Deliver security issue training and awareness for R&D • Participate in incident response where application-level context and triage are necessary • Collaborate with security compliance functions to align technical controls with compliance requirements • Work closely with Engineering and Product teams to expand the secure SDLC • Own API security and penetration testing processes • Advocate for security best practices across the codebase and promote earlier security reviews

🎯 Requirements

• 3+ years of previous web and mobile application security assessment experience • Experience securing Java-based, API-driven microservices deployed in a cloud environment • Experience with React (JS) for frontend and Java for backend services • Previous experience implementing secure SDLC practices and automations such as SAST, DAST, RAST, and IAST in at least medium-scale software development organizations • Ability to write code in one or more programming languages • Must be legally authorized to work in the United States • Must not require current or future employment sponsorship • Ability to participate in virtual interviews, face-to-face conversations, and coding exercises

🏖️ Benefits

• Equity in the form of stock options • Pre-tax and ROTH 401(k) options via Fidelity with up to a 4% company match • Comprehensive medical, dental, vision, life, and disability benefit plans effective on hire date • 100% coverage of employee premiums and 85% coverage of eligible dependents • Pre-tax flexible spending account options for health, dependent care, and commuter expenses • Flexible PTO • 10 company holidays • End-of-year company shutdown • Up to 26 weeks of Parental Leave • Monthly cell phone/internet stipend • IATAN travel membership • Pet insurance • Financial wellness tools • Calm app access • Annual performance bonus • Comprehensive benefits

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume