Senior Security Engineer, Application Security
Trail of Bits- Full Time
- Senior (5 to 8 years)
Candidates should have 8+ years of professional experience as a security engineer, software engineer, site reliability engineer, penetration tester, or security consultant. A minimum of 5 years of experience working in Agile development is required, along with expertise in cloud environments like AWS, application security testing tools, infrastructure as code, containers, continuous integration, and defect tracking tools. Advanced knowledge of programming languages such as Python and Typescript is necessary, along with a high-level understanding of security weaknesses and in-depth knowledge of common application and network protocols.
The Staff Application Security Engineer will lead high-priority product security initiatives and secure NerdWallet's products by identifying risks early in the SDLC. They will develop application security tooling and processes, conduct security-related research and assessments, and provide security analysis, design, and training to the organization. This role involves integrating security into the application development process, partnering with cross-functional teams to identify vulnerabilities, designing security tools, and mentoring junior team members.
Financial guidance platform for personal finance
NerdWallet helps individuals make informed financial decisions by providing resources and tools for comparing credit cards, mortgages, personal loans, and insurance. The platform is user-friendly, featuring calculators and educational content that simplify complex financial concepts. Unlike competitors, NerdWallet operates on an affiliate marketing model, allowing it to offer services for free while earning revenue through partnerships with financial institutions. The company's goal is to empower consumers to manage their finances better by providing clear and comprehensive information.