Security Engineer at Workstream

Shanghai, Shanghai, China

Apply Now

Not SpecifiedCompensation

Senior (5 to 8 years)Experience Level

Full TimeJob Type

UnknownVisa

Technology, SaaSIndustries

Requirements

4+ years of security experience
4+ years of software development experience
Strong understanding of Web application security, including hands-on exploitation skills coupled with defensive skills
Familiarity with secure development practices and security testing techniques (SAST, DAST, fuzzing, etc.)
Familiarity with infrastructure and systems security domains
Familiarity with web application security defense techniques and technologies (WAF, RASP, sanitization/validation, etc.)
Familiarity with microservices architectures, platforms, and 12-factor design
Modest ability to build tools and automation in Python or other languages
Ability to explain complex security issues and their impact to diverse audiences
Be a fast learner and have experience partnering with cross-functional teams
BA/BS in Computer Science or similar technical degree or equivalent experience

Responsibilities

Provide security guidance to Engineering and Product teams
Build threat models and conduct risk assessments for new features and services
Perform design and code reviews (lots of them!)
Identify, triage, resolve, and manage security vulnerabilities identified in Workstream products
Build libraries and tools to make software built and deployed at Workstream secure by default
Make security an integral part of our CI/CD pipeline
Perform internal penetration tests and participate in blue team exercises

Skills

Key technologies and capabilities for this role

PythonSASTDASTfuzzingWAFRASPmicroservices12-factor designthreat modelingrisk assessmentsweb application securityinfrastructure security

Questions & Answers

Common questions about this position

Is this position remote?

Yes, this is a fully remote position.

What experience is required for this Security Engineer role?

Candidates need 4+ years of security experience and 4+ years of software development experience, along with a strong understanding of web application security.

What key skills are needed for the Security Engineer position?

Required skills include familiarity with secure development practices, security testing techniques like SAST and DAST, infrastructure security, web security defenses, microservices architectures, and Python scripting for tools and automation.

What is the company culture like at Workstream?

Workstream is a mission-driven Series B startup focused on empowering deskless workers and local businesses through premium software solutions, with rapid expansion backed by top VCs.

What makes a strong candidate for this Security Engineer role?

Strong candidates have a BA/BS in Computer Science or equivalent, excellent communication skills to explain security issues, and experience collaborating with cross-functional teams as a fast learner.

Workstream

HR platform for hiring and onboarding

About Workstream

Workstream.us is a platform that helps businesses streamline their hiring and onboarding processes, particularly for hourly workers. It offers tools for applicant tracking, digital onboarding, payroll management, and employee engagement, all designed to attract and engage job candidates effectively. The platform uses artificial intelligence to automate HR tasks, allowing businesses to focus more on their employees. Workstream differentiates itself by providing a comprehensive suite of HR solutions tailored for hourly worker employment, with a subscription-based revenue model.

San Francisco, CaliforniaHeadquarters

2017Year Founded

$114.8MTotal Funding

SERIES_BCompany Stage

Enterprise Software, AI & Machine LearningIndustries

201-500Employees