Application Security Engineer, Kustomer

Kustomer's Security team is seeking a passionate hacker who derives purpose in life by revealing potential weaknesses and then crafts creative solutions to eliminate those weaknesses. Your skills will be the foundation of security initiatives that protect the security and privacy of over a billion people. You will be relied upon to scale up vulnerability detection and prevention as well as provide engineering and product teams with the security expertise necessary to make confident product decisions. Come help us make life hard for the bad guys.
Application Security Engineer, Kustomer Responsibilities

• Conduct regular security assessments
• Analyze, assess, and respond to various internet threats
• Analyze and assess recurring security issue patterns from security reviews and bug research programs
• Build prototypes of tools, exploit mitigations, libraries and frameworks used for vulnerability detection and/or prevention
• Use your native security expertise to refine those detection and prevention measures
• Drive for adoption of the aforementioned tools and frameworks to help developers build secure products and infrastructure
• Review new product features and changes to architecture for security, privacy, and compliance issues
• Take a leadership role in driving internal security and privacy initiatives
• Collaborate with engineering teams to resolve security-related findings
• Provide guidance to engineering and product on best practices around security and security architecture

Minimum Qualifications

• Experience managing projects start-to-finish for development and deployment of security related processes or tooling
• Experience performing penetration tests
• Familiarity with native programming languages, development practices, and common bug patterns
• Familiarity with native analysis tooling and frameworks (fuzzing, static analysis, etc.)
• Effective communication skills
• B.S. or M.S. Computer Science or related field, or equivalent experience
• Cloud security and security architecture experience (reviewing tech specs, RFCs, etc.)

Preferred Qualifications

• Application security experience with SaaS B2B platforms
• Experience with JavaScript and related frameworks (e.g. node.js)
• Experience applying fixes to vulnerable code or other security findings
• Experience in contributions to the security community (public research, blogging, presentations, etc.)

About Meta
Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today-beyond the constraints of screens, the limits of distance, and even the rules of physics.
Meta is committed to providing reasonable support (called accommodations) in our recruiting processes for candidates with disabilities, long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support. If you need support, please reach out to [email protected] .
(Colorado only*) Estimated salary of $177,000/year + bonus + equity + benefits
*Note: Disclosure as required by sb19-085(8-5-20)