Staff Application Security Engineer

Employment Type: Full-time

Position Overview

Collectors is the leading creator of innovative technology that provides value-added services for collectors worldwide. We grade, authenticate, vault, and sell millions of record-setting collectibles, all while modernizing and digitalizing the process to further our mission of helping collectors pursue their passions. Our services span collectible coins, trading cards, Funko Pops!, video games, event tickets, autographs, and memorabilia. Our subsidiaries include PSA, PCGS, SGC, WATA, and Card Ladder.

Since our founding in 1986, we have graded and authenticated millions of items. We employ more than 1,900 people across our headquarters in Santa Ana and offices in Jersey City, Tokyo, Shanghai, Hong Kong, Toronto, Guadalajara, Dallas, and Paris.

We’re transforming the collecting experience with technology that brings authentication, grading, and trading into the modern era. Our products are equalizing the playing field by providing tools that make complex research analytics — including pricing, scarcity reports, and historic sales data — accessible to every collector, old or new. Our engineering mission is to democratize technology while promoting innovation, collaboration, and continuous learning throughout the organization. We're seeking engineers to utilize advanced technology in agile settings, with a focus on improving the customer experience for every collector.

The Collectors Cybersecurity team is committed to utilizing cybersecurity, risk, and privacy best practices on our platforms, leveraging signal intelligence and observability at scale to protect our customers, employees, and our brand.

We’re looking for a Staff Application Security Engineer to join our Cybersecurity team to partner with the broader Product and Tech org and drive secure by default architectures and ensure the security and integrity of our applications. You’ll report to the VP of Cybersecurity. The role is open for remote or hybrid candidates. We believe that there is significant value in in-person collaboration. If you live within a 1-hour commuting distance to one of our offices, you will be required to be onsite most of the time. This will be discussed further as part of the recruiting process.

Responsibilities

• Security Design Reviews/Threat Models: Ensure security guardrails are integrated into products by conducting thorough reviews of design, implementations, and code.
• Collaboration and Engineering Guidance: Provide proactive guidance and education to engineering and product teams on available security controls and their appropriate use to help prevent vulnerabilities, striving for secure by default paradigms. When a vulnerability is discovered, partner with engineering and product teams to identify the appropriate remediations and compensating controls, sometimes getting creative when the “textbook remediation” is not viable.
• Expertise in Web and Mobile Security: Serve as a trusted advisor, offering web and mobile security expertise to enable engineering and product teams to make informed decisions.
• Automated Analysis and Secure Frameworks: Scale security efforts by integrating automation for the identification, prioritization, and remediation of vulnerabilities. Empower engineering teams through automation, security guidance, tooling, patterns, and training to scale security practices across the organization. Partner with cloud security and incident response teams to identify and implement security tooling to detect security vulnerabilities and risks at scale.
• Lead by example and be a champion of all company policies, including safety, attendance & security.

Requirements

• 8+ years of experience and expertise running an Application Security program, with a focus on securing diverse application environments.
• Proficient in secure coding practices and knowledgeable about common application security vulnerabilities.
• Working knowledge of... (Note: The original text was cut off here)

Company Information

Collectors is the leading creator of innovative technology that provides value-added services for collectors worldwide. Our services span collectible coins, trading cards, Funko Pops!, video games, event tickets, autographs, and memorabilia. Our subsidiaries include PSA, PCGS, SGC, WATA, and Card Ladder. Since our founding in 1986, we have graded and authenticated millions of items. We employ more than 1,900 people across our headquarters in Santa Ana and offices in Jersey City, Tokyo, Shanghai, Hong Kong, Toronto, Guadalajara, Dallas, and Paris.