Staff Application Security Engineer

Job not on LinkedIn

🔥 4 minutes ago

🇺🇸 United States – Remote

💵 $182.8k - $215k / year

⏰ Full Time

🔴 Lead

💻 Application Engineer

👻 Ghost score 2%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Hotel Engine

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2018

🏨 Hospitality

📦 Logistics

🛍️ eCommerce

💰 $65M Series B on 2021-12

Hospitality • Logistics • eCommerce

Hotel Engine is a powerful platform that simplifies business travel by allowing companies to easily book, manage, and save on travel needs. The platform offers access to over 750,000 hotels globally, enabling seamless reservations for various group sizes, from small teams to large corporate events. With features like centralized reporting, flexible payment options, and dedicated support, Hotel Engine aims to streamline the travel experience for both organizations and individual travelers, ensuring significant savings in time and money.

📋 Description

• Own the configuration, tuning, and management of the SIEM solution • Diagnose unusual threats through sophisticated analysis and develop security alerts across multiple layers • Perform architecture, code, and infrastructure configuration reviews • Conduct light penetration testing on web and mobile applications • Identify root causes of vulnerabilities and resolve them • Maintain and optimize a vulnerability management CI/CD pipeline within container and application delivery infrastructure • Partner with development and infrastructure teams to enforce secure coding practices and remediation strategies • Build and maintain enterprise security frameworks and tooling • Contribute to incident response and forensic investigations • Stay current on emerging threats and provide guidance to development teams • Help develop security training and improve the organization’s security posture

🎯 Requirements

• Highly skilled in one or more programming languages, such as Ruby, Java, Python, C#, or Node.js • Expertise managing SIEM solutions and developing efficient alerting • Strong knowledge of Docker and Kubernetes • Hands-on experience in automated container vulnerability management • Mastery of SAST, DAST, and IAST tools • Ability to perform manual validation testing • Deep knowledge of the OWASP Top 10, Mitre Top 25, and secure coding practices • Ability to assess complex, ambiguous situations and identify root causes • Clear, direct communication skills and a track record of earning credibility with peers • Passion for mentoring others • Experience with cloud security concepts and compliance frameworks such as SOC 2 and PCI

🏖️ Benefits

• Competitive base pay tied to role and experience • Equity for all employees • Some roles are eligible for bonuses or commissions • Hybrid-hub model with office-based or fully remote work environments • Benefits available through Engine’s full benefits program; perks and benefits may vary based on employment type and location