Product Security Engineer at Mattermost

United States

Apply Now

Not SpecifiedCompensation

Mid-level (3 to 4 years)Experience Level

Full TimeJob Type

UnknownVisa

Technology, Cybersecurity, DefenseIndustries

Requirements

BS in Computer Science, Cybersecurity, Software Engineering, or a related technical field, or equivalent experience, with 3+ years of relevant experience in application security, secure software development, or penetration testing
Understanding of web application security and secure development practices
Understanding of common security libraries, security controls, and common security flaws
Experience with static/dynamic analysis, and common exploit methods
Experience in one or more programming languages, ideally Go or Javascript
Excellent written and verbal communication skills
Demonstrable teamwork skills and resourcefulness
For candidates residing in the U.S.: Ability to obtain and maintain a U.S. government security clearance in the future (U.S. citizens eligible under applicable clearance requirements)
Meet eligibility requirements for access to export-controlled information as defined by U.S. export control laws, including EAR and ITAR

Responsibilities

Support the application vulnerability management and mitigation approaches
Conduct application security reviews through manual code review or static/dynamic code analysis
Engage in threat modeling and design reviews of in-house developed software components
Provide security guidance and training to internal development teams
Triage SCA findings and support internal development teams in SCA findings remediation
Improve and/or automate existing processes to increase efficiency
Implementation of additional application security tooling and/or processes across the company
Coordinate with relevant stakeholders, gather requirements, and lead the implementation

Skills

Key technologies and capabilities for this role

Application SecurityVulnerability ManagementStatic Code AnalysisDynamic Code AnalysisThreat ModelingSCACode ReviewSecurity Automation

Questions & Answers

Common questions about this position

What experience is required for the Product Security Engineer role?

A BS in Computer Science, Cybersecurity, Software Engineering, or related field (or equivalent) with 3+ years in application security, secure software development, or penetration testing is required. Key skills include understanding of web application security, secure development practices, common security libraries and flaws, experience with static/dynamic analysis and exploit methods, and programming in Go or Javascript.

Is this a remote position at Mattermost?

This information is not specified in the job description.

What are Mattermost's core values?

Mattermost's core values are Customer Obsession, Earn Trust, Self Awareness, Ownership, and High Impact.

What is the salary or compensation for this role?

This information is not specified in the job description.

What makes a strong candidate for this Product Security Engineer position?

Strong candidates will have 3+ years in application security or related fields, technical expertise in secure coding and analysis tools, programming experience (especially Go or Javascript), excellent communication skills, and teamwork abilities. U.S. candidates must be citizens eligible for government security clearance, and all must meet U.S. export control requirements.

Mattermost

Secure collaboration platform for technical teams

About Mattermost

Mattermost provides a secure collaboration hub specifically designed for technical teams. Its platform allows users to communicate in real-time, share files and code snippets, and automate workflows, all while maintaining a high level of security and control over data. Users can customize the platform to fit their needs and deploy it in various environments. Mattermost integrates with essential tools like GitHub and GitLab, enabling teams to streamline their workflows within a single interface. Unlike many competitors, Mattermost offers both premium features, such as advanced compliance and admin controls, and an open-source version, allowing for greater flexibility and customization. The company's goal is to enhance productivity and security for teams working in complex operational settings.

Palo Alto, CaliforniaHeadquarters

2016Year Founded

$68.1MTotal Funding

SERIES_BCompany Stage

Enterprise Software, CybersecurityIndustries

51-200Employees

Benefits

Fully remote work

Office setup fund

Coworking space stipend

Internet and mobile phone reimbursement

401k

Unlimited vacation

Family & friends days

Async weeks

Health benefits

Global and regional team meetups

Open source Fridays

Community hackathons and events

Risks

Emerging open-source platforms may offer similar features at lower costs.

AI-driven tools could outpace Mattermost's current feature set.

Security vulnerabilities in open-source platforms may increase scrutiny on Mattermost.

Differentiation

Mattermost offers a secure, open-source platform for technical team collaboration.

The platform supports real-time communication and workflow automation for agile development.

Mattermost provides flexible integrations with tools like GitHub and ServiceNow.

Upsides

Rising demand for remote collaboration tools boosts Mattermost's market potential.

Emphasis on cybersecurity increases the appeal of Mattermost's secure platform.

Growth in open-source software market expands Mattermost's community and contributor base.

Land your dream remote job 3x faster with AI

Try Jobo Free