Senior Software Engineer, Security

About the role

ABOUT SUPER.COM http://Super.com

We started Super.com http://Super.com to help maximize lives–both the lives of our customers and the lives of our employees– so that everyone can experience all that life has to offer. For our employees, our promise is that Super.com http://Super.com is more than just a job; it’s an opportunity to unlock one’s potential, where learning is celebrated and impact is realized.

We are more than a fast-paced, high-growth tech company https://www.super.com/press/super-2022-fast-500; we care about our people and take career progression seriously. This is your career and our aim is to supercharge it through the people, the work, and the programs https://www.super.com/careers that fuel who we are.

About the role

As a Senior Software Engineer on our Security team, you'll help shape the direction of our security tooling and AppSec practices and lead high-impact security work across the company. Your work spans offense and defense: hardening how our products are designed and built, breaking them to surface what matters, and building the tooling and AI that let engineers move fast without creating risk.

You'll report to our Staff Software Engineer - Security and work closely with product engineers, DevOps, and Fraud. Expect high autonomy, frequent collaboration, a fast pace, and reliance on your own initiative. You'll take security initiatives end-to-end, mentor other engineers, and raise the bar for security practices across engineering.

What you’ll be working on:

- Help shape the technical direction of our security tooling and AppSec practices

- Lead secure design across major engineering projects, from threat modeling through architecture

- Design and evolve our DevSecOps architecture, deciding how security is embedded across the SDLC

- Build and extend the in-house security tooling and find new and innovative ways to identify and remediate issues

- Identify and implement new ways to use AI to automate and scale our security work

- Perform advanced offensive security work, chaining vulnerabilities and building proofs of concept that demonstrate real business impact

- Enable developers to write more secure code and ship security work faster via training and AI-powered tooling

- Mentor and develop engineers on the team, and set the bar for what good security work looks like

What we’re looking for:

- 5+ years working in security (AppSec, DevSecOps, offensive security, or similar)

- Professional offensive security experience, with a proven ability to find, chain, and exploit complex vulnerabilities in applications and infrastructure

- Track record of leading security initiatives and mentoring or developing other engineers

- Experience leading threat modeling and secure design across engineering projects

- Experience designing and embedding security across CI/CD pipelines and the SDLC