Senior Product Security Engineer, Application Security

🕒 July 30

🇺🇸 United States – Remote

💵 $160k - $250k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 4%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CrowdStrike

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2011

🔒 Cybersecurity

☁️ SaaS

🤖 Artificial Intelligence

Cybersecurity • SaaS • Artificial Intelligence

CrowdStrike is a cybersecurity company that provides cloud-based security services to stop breaches. It is recognized as a leader in endpoint protection, identity and cloud security, and managed detection and response. CrowdStrike's platform, Falcon, integrates artificial intelligence to offer real-time visibility, detection, and protection against sophisticated cyber threats. The company is lauded for its effectiveness in securing networks and data, making it a trusted partner for businesses worldwide.

📋 Description

• Help us protect CrowdStrike and its customers from the most advanced threats by securing our applications. • Join engineering teams working on applications as a security expert and advisor, influencing the design and capabilities of our products • Create, maintain, and mature threat models to drive security architecture review and eliminate threat surface area • Review application source code, looking for security defects and risk • Attack applications throughout the Secure Development LifeCycle • Work with developers to help them understand defects, risks, design weaknesses, etc. and implement proven solutions • Build integrated tools and automation to make life easier for you, your team, and our engineering partners • Drive response efforts to our bug bounty program, hunt for similar issues across the platform, and improve the security of our applications

🎯 Requirements

• 10+ years of experience in CyberSecurity, with expertise in identifying security defects and engaging with engineering teams to find solutions • A deep understanding of how software products are created and shipped in Agile/DevOps like environments • Experience with threat model framework(s), especially using STRIDE • Proven experience in manual secure code review for apps built with Go (Golang), Python, or JavaScript • Deep expertise in browser security implementations across platforms (Chrome, Firefox, etc. for desktop and mobile) with strong experience across the following: TypeScript, React, Node.js, Electron • Demonstrable proficiency in hands-on review and testing of API endpoint security • A working knowledge of secure configuration of cloud-native and containerized apps in multiple Cloud environments (GCP, Azure, AWS) • Experience using and/or maintaining commercially available AppSec tools like SAST, DAST, CSPM, DSPM, and ASPM suites • A solid understanding of common software weaknesses that impact cloud and web applications (not just the OWASP Top 10) and demonstrable experience in application penetration testing • Examples of collaborating across technical teams: asking technical questions, challenging assumptions, getting or providing context for decisions, etc. • Demonstrable experience developing/maintaining automation for application security tasks and defect identification. • Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.

🏖️ Benefits

• Market leader in compensation and equity awards • Comprehensive physical and mental wellness programs • Competitive vacation and holidays for recharge • Paid parental and adoption leaves • Professional development opportunities for all employees regardless of level or role • Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections • Vibrant office culture with world class amenities