Senior Security Engineer, Product Security

Security Engineers at League work with product managers, designers and developers in cross-functional teams dedicated to areas of the product. Their mandate is to ensure that features built at League have security and privacy baked into their design.

In this role, you will:

• Help teams identify and quantify threats and risks using threat modeling and other processes to promote security and privacy by design
• Hold lunch and learns and other training to level up security across the engineering organization
• Build security automation and tools to make it easier to ship secure code
• Perform tools assisted security scanning and testing
• Identify opportunities to automate the detection of indicators of compromise and roll them into incident management playbooks
• Participate in an on-call rotation
• Work together with technical individuals in our security, platform, and product functions to drive security into their tools and processes

 About You:

• You have a degree in a security, computer science or software engineering from a reputable post-secondary institution
• You have experience with Design reviews and threat modeling.
• You have experience with penetration testing with web apps.
• Good to have experience with mobile apps (Android and iOS)
• You have experience in evangelizing secure coding practices and other aspects of Application security.
• You enjoy reading up on the latest security topics.
• Good to have understanding of SOC2 and HITRUST.
• You are able to write code in Python, Go or similar higher level languages.
• You have some Infrastructure as Code (Terraform, Ansible) experience or a strong desire to learn.
• You are a collaborator at your core.