Senior Security Engineer - AppSec

**Considering candidates for remote work in Switzerland**

We are looking for a Senior AppSec Security Engineer. The Security Team is responsible for all aspects of security at Evidation. This role is ideal for someone with strong experience in application security who is looking to take their security career to the next level with the ownership of a complex set of applications and exposure to a broad range of security technologies and domains.

• Partner with engineering teams to secure our development lifecycle
• Secure our architecture, implementing mitigations, threats detection and monitoring, and participate in defining the long-term strategy for our application security
• Align with IT to maintain daily operational security
• Work with DevOps to ensure the security of our cloud infrastructure 

Minimum Qualifications:

• Experience with Linux-based systems
• 5+ years of application security experience or equivalent mix of software engineering and security experience
• Fluency at a high-level in at least one programming languages (e.g., Python, Ruby), with Ruby preferred
• Fantastic communication skills, especially among audiences with differing technical backgrounds
• Strong security fundamentals, including threat modeling and secure design principles
• Familiarity with cryptographic primitives such as hashing, signing, and encryption
• Experience with security testing (penetration testing/red teaming)
• Familiarity with scalable systems and service-oriented architectures
• Experience with automating security workflows and operations
• Experience maintaining the security of applications throughout their lifecycle

Preferred Qualifications:

• Expert-level knowledge of Ruby
• Experience with Ruby on Rails, Python, iOS, and Android security
• Experience with AWS infrastructure
• Experience with Terraform
• Experience with at least one configuration management system (SaltStack/Puppet/Chef)
• Experience with Docker and containerization security
• Experience with CI/CD and secure SDLC
• Proven ability to implement security automation in a fast-moving environment
• Experience with software vulnerability blackbox testing including fuzzing

Evidation creates new ways to measure and improve health in everyday life. Built upon a foundation of user privacy and control over permissioned health data, Evidation’s consumer platform is trusted by millions of individuals—generating data with unprecedented speed, scale, and rigor. We partner with leading healthcare companies to understand health and disease outside the clinic walls. Evidation is working to bring people individualized, proactive, and accessible healthcare—faster. Founded in 2012, Evidation is headquartered in California with employees working from around the globe.

• Put individuals first
• Challenge each other and state your good intent
• Go fast while maintaining quality and integrity
• Work to win together

#LI-Remote