Senior Application Security Engineer

About the role

Identity Manager, Active Roles, Safeguard and OneLogin decide who gets into everything else a customer runs. That sets the security bar for our code higher than it sits at most software companies, and it's the reason this role works inside engineering rather than alongside it. Much of what we build is deployed by customers in their own datacenters.

What you'll do

• Threat model the things that matter: authentication and session handling, privilege elevation paths, connector and integration boundaries
• You choose where the depth goes
• Give product and engineering leadership a defensible read on which risks are worth carrying, in language a release decision can be made from
• Hold commit access to product repositories
• A dependency bump, a patched library, a fix in the code path that produced the finding: submit it, review it, and pair with the engineer who owns that module

What you need

• .NET
• Java
• C#
• Compliance
• Lean
• Any graduate