Application Security Engineer

🕒 February 19

🇺🇸 United States – Remote

💵 $150k - $173k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

EasyPost

WebsiteLinkedInAll Job Openings

51 - 200 employees

☁️ SaaS

🚗 Transport

🔌 API

💰 $25M Series B on 2021-09

SaaS • Transport • API

EasyPost is a company that provides a comprehensive suite of shipping solutions designed to simplify and modernize parcel shipping operations. Their offerings include a powerful shipping API, which allows businesses to access over 100 carriers, automate shipping operations, and secure discounted rates. EasyPost also offers advanced analytics tools that provide insights into supply chain efficiency, carrier performance, and delivery tracking. Their enterprise solutions cater to high-growth shippers with configurable business rules, 24/7 support, and the ability to significantly reduce supply chain costs. The company is also committed to sustainability, offering carbon neutral shipping options. Overall, EasyPost aims to streamline complex shipping logistics with modern, scalable, and insightful technology solutions.

📋 Description

• Lead Security Architecture: Design, build, and maintain scalable security systems and infrastructure that align with the organization's evolving business goals. • Embed Security by Design: Partner with cross-functional teams to integrate security and privacy controls into the product lifecycle, from project inception to final delivery. • Scale Security Operations: Build automated systems and programs that allow security at EasyPost to scale efficiently in both breadth and depth of coverage. • Drive DevSecOps Adoption: Champion "shift-left" methodologies, utilizing Infrastructure-as-Code and CI/CD design patterns to move security feedback to the earliest phases of development. • Product Innovation: Architect and build competitive customer-facing security features that support business growth and appeal to security-conscious markets. • Intelligent Notifications: Maintain high-fidelity alerting/notification infrastructure that delivers timely, relevant, and actionable intelligence to internal staff and customers. • Enablement & Education: Create self-service documentation, training materials, and knowledge base resources that empower developers to write safer code and increase productivity. • M&A Integration: Collaborate directly with M&A entities to assess risks, integrate products, and unify diverse environments under our security standards.

🎯 Requirements

• Bachelor's degree in computer science, management information systems, or related field. • 5+ years of related experience, master’s degree and 3+ years of related experience, or equivalent related work experience. • Ability to code proficiently in at least two of the following programming languages: Python, Ruby, Go, and Rust. • Ability to design systems that are simple to understand, maintainable, scalable, and resilient. • Prior experience securing large-scale web applications and/or Application Programming Interfaces (APIs), including performing security design reviews, vulnerability assessments, and building testing strategies for logic flaws. • The ability to understand and communicate concepts around threat modeling and risk management, including to both technical and non-technical stakeholders. • Proven history of building strong partnerships with Engineering and Product teams to deliver world-class products and features. • Working knowledge of several compliance and regulatory frameworks (SOC2, ISO 27001, SOX/ITGC, HIPAA, GDPR, CCPA, etc…) • Experience in assessing risk and selecting key objectives during the vendor management lifecycle for software, hardware, cloud, and software-as-a-service vendors. • Deep knowledge of how to build and maintain mixed computing environments (Linux, Windows, Mac OS, and mobile devices). • Past experience with migrating applications and services to public cloud providers (AWS, GCP, Azure, etc…)

🏖️ Benefits

• Comprehensive medical, dental, vision, and life insurance • Competitive compensation package and equity • Monthly work from home stipend of $50 • Flexible work schedule and paid time off • Collaborative culture with a supportive team • A great place to work with unlimited growth opportunities • The opportunity to make massive contributions at a hyper-growth company • Make an impact on a product helping ship millions of packages per day