SoFi

As an Application Security Engineer, you will be responsible for ensuring the security of our existing and new platforms, products, and services.. Contribute to vulnerability management, application security and/or offensive/red-team operations.. Experience with different types of vulnerability assessment tools or related experience in vulnerability detection DAST/SAST toolsOutstanding communication and interpersonal skills, with the capacity to effectively convey intricate security concepts to both technical and non-technical stakeholders.. Ability to demonstrate knowledge with prioritizing remediation activities with operational teams through risk ratings of vulnerabilities and assetsExperience judging the vulnerability priority based on risk and impactDeep application security knowledge, with the ability to map an application vulnerability to exploitation indications and relevant investigative techniques.. Experience with at least one scripting language (Bash, Go, Python).

application security engineer

The roleSoFi Product Security team assists and partners with engineering, product and design organizations. Our mission is to secure the products and services delivered to our members and customers. We deploy best in class Product Security practices, compliance frameworks, and design patterns by collaborating with product owners, engineers, and executives. The mission is core to SoFi’s value “Put our member’s interest first”.. As an Application Security Engineer, you will be responsible for ensuring the security of our existing and new platforms, products, and services. You will work in conjunction with security architects, development (engineering), and product teams to review systems and services with security controls baked into them. This role is the primary face of the security organization to other groups within SoFi. The ideal candidate will be highly collaborative, balancing the right level of security with business objectives, and working to creatively solve complex Product Security related problems in an agile environment. What you’ll do: Perform regular vulnerability assessments using different tools. Regularly drive remediation and reporting of cataloged vulnerabilities.Assess discovered vulnerabilities and properly prioritize their scope, impact and necessary response actions.Conduct security reviews of our products and production infrastructure.Contribute to vulnerability management, application security and/or offensive/red-team operations.Engage in security audit and security regulatory exercises with partners and vendors.Support regulatory compliance monitoring and reportingSupport treatment and remediation activities with identified points of contact and system ownersDevelop processes and document procedures for use by other team members and to enhance efficiencies What you’ll need: Bachelor’s Degree in Computer Science, Information Systems, or equivalent work-related experienceStrong knowledge of industry standards regarding vulnerability management including Common Vulnerabilities and Exposures (CVE), Common Vulnerability Scoring System (CVSS), OWASP, etc.Experience with different types of vulnerability assessment tools or related experience in vulnerability detection DAST/SAST toolsOutstanding communication and interpersonal skills, with the capacity to effectively convey intricate security concepts to both technical and non-technical stakeholders.Ability to demonstrate knowledge with prioritizing remediation activities with operational teams through risk ratings of vulnerabilities and assetsExperience judging the vulnerability priority based on risk and impactDeep application security knowledge, with the ability to map an application vulnerability to exploitation indications and relevant investigative techniques.Experience with at least one scripting language (Bash, Go, Python).Experience with Secure Software Development Life Cycles. Preferred Qualifications: 2+ years of experience in an information technology/security role2+ years of experience with cloud technologiesAbility to manage relationships with other business units, external vendors, and stakeholders when IT security risks are present and system or process changes must be made to mitigate riskFamiliarity with AWS and at-scale servicesExperience with micro-service architectureKnowledge of CI/CD, application development and testing toolsAbility to work in a fast paced and Agile development environmentWork and play well with others; SoFi is a collaborative environment Nice to have: Masters or PhD in Computer Science or EngineeringFinancial services experience Compensation and BenefitsThe base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate’s experience, skills, and location. To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page!Pay range: $89,600.00 - $168,000.00Payment frequency: AnnualThis role is also eligible for a bonus, long term incentives and competitive benefits. More information about our employee benefits can be found in the link above.

START NEW SEARCH