inhousefyi
← Back to listings

Application Security Engineer

VirtruRemote · Posted 2 months ago
Full-timeRemoteEst. 190,000 USD
Apply now

Description

About Virtru:

While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you can intentionally share it with others, but without sacrificing security, privacy, or control.

We've created both a suite of powerful data protection applications and an open platform that's sparking an ecosystem of innovation. Through the Trusted Data Format (TDF) open standard, we're not just protecting data; we're creating a new paradigm where security enables sharing rather than preventing it.

Think of us as the Android of data protection: a robust platform with an open core that developers and partners can build upon, coupled with our own best-in-class applications that showcase what's possible when you reimagine security from the ground up.

Backed by Iconiq Capital, Bessemer Venture Partners, Foundry Capital, and Tiger Global, we're helping Fortune 500 companies and government agencies discover that true data security means having the freedom to share, collaborate, and innovate — without compromise.

Compensation: $180,000 - $200,000/year

Team & Position Details:

Here at Virtru you'll join an innovative product security team that is helping secure some of the world's most important information. Our platform, built on an open source core, functions in a wide range of threat models. As an application security engineer you will help our engineering teams maintain and develop our product, and directly have impact in a security centric company and product.

An ideal candidate is prepared to operate in a public and open source form, in addition to being able to review complex systems and product requirements. You should have a strong foundation in the fundamentals of cryptography, and be able to talk and collaborate with development teams. Our applications are primarily built in Go and Javascript. We use a range of security tools, and aggressively automate where we can (even if we have to code and build it).

If you are excited rather than scared by highly technical problems, we are offering a security role where you can learn and grow while having direct impact in continuing to harden a security critical mission.

As an Application Security Engineer, your responsibilities will include:

  • Security Engineering
    • Collaborate with development teams, Site Reliability Engineering, and other stakeholders to strengthen the adoption of security best practices throughout the SDLC.
    • Independently identify security improvements and implement them.
  • Vulnerability Management:
    • Implement, manage, and automate vulnerability management processes.
    • Prioritize and remediate vulnerabilities discovered through internal scans, penetration tests, and bug bounties.
  • Security Assessments
    • Conduct threat modeling, code audits, design reviews with engineers to ensure effective and secure development.
    • Collaborate in providing actionable recommendations to find workable solutions.
  • Threat Hunting:
    • Establish a threat hunting capability and automate where appropriate.
    • Enhance logging capabilities related to security events.
  • Security Tools Integration and Management:
    • Integrate and manage dynamic and static code analysis tools.
    • Ensure operation of security tools within the development pipeline.

Skills that will help you thrive in this role:

  • 4+ years experience in secure development or application security.
  • Deep knowledge of security concepts such as authentication, web architecture, etc.
  • Experience with Nodejs, Go, etc.
  • Experience running bug-bounty, penetration testing, vulnerability scanning programs.
  • Experience setting up and maintaining SAST, DAST, IAST and SCA tooling
  • Experience using assessment tools such as Burp, ZAP, Qualys, Nessus, etc.
  • Experience building and maintaining WAF solutions.
  • Familiarity with industry security practices, standards, and regulations such as FedRAMP, SOC2, HIPAA, etc. a plus.
  • Familiarity with GCP/AWS and Kubernetes infrastructure security a plus.
  • Self-motivated and goal driven, able to find what needs to be done and do it.

Virtruvian qualities that will set you up for success:

  • Thinking outside of the box to respectfully challenge your teammates and managers in the pursuit of excellence
  • Strong sense of urgency with an action-oriented mindset
  • Able to collaborate and adapt to shifting priorities as business needs evolve
  • Comfortable with asynchronous communication including slack, email, zoom, etc.

Perks & Benefits:

At Virtru, we believe people do their best work when their wellbeing is put first. This is why we make your wellbeing our priority with a thoughtful and holistic program that encompasses Occupational, Mental, Social, Physical, and Environmental Wellness by offering benefits such as…

  • A Flexible PTO policy — we strongly encourage you to take time off (in addition to 14 holidays) to ensure that you are getting the proper time needed to unplug and recharge.
  • A $1,500 annual Learning & Development Stipend focused on providing you the resources to continually learn and professionally grow.
  • Frequent company-sponsored team celebrations that provide ample opportunities to connect with teammates and be social!
  • Access to an Employee Assistance Program
  • Access to Headspace, a mental health app tailored to your specific needs.
  • A flat 3% contribution to your retirement account
  • A high degree of flexibility — Have an appointment, errand, or family emergency to take care of? Hop to it! We give you the time and space to take care of you and your own first.

In addition to wellbeing, Virtru places a strong emphasis on diversity, equity, inclusion, and belonging. Our DB&I Council is dedicated to fostering an inclusive workplace and making the psychological safety of each and every one of our teammates a top priority.

Additional perks include:

  • Competitive compensation
  • Generous parental, medical, and bereavement policies
  • 401K contribution and stock options
  • Full medical, dental, and vision benefits
  • New Hire Swag and IT Welcome boxes
  • Structured semi-annual 360° performance reviews

Virtru is committed to building an inclusive environment for people of all backgrounds and everyone is encouraged to apply. Virtru is an Equal Opportunity Employer and does not discriminate on the basis of race, color, gender, religion, disability, national origin, protected veteran status, age, or any other status protected by applicable national, federal, state, or local law.

Similar jobs

VirtruRemote

Est. 160,000 USD

About Virtru: While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you…

Full-timeRemote
VirtruRemote

Est. 182,500 USD

About Virtru: While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you…

Full-timeRemote
VirtruRemote

Est. 150,000 USD

About Virtru: While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you…

Full-timeRemote
VirtruTampa, Florida, United States

Est. 185,000 USD

About Virtru: While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you…

Full-time
VirtruWashington, DC, United States

Est. 195,000 USD

About Virtru: While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you…

Full-time
VirtruFarnborough, United Kingdom

Est. 142,500 GBP

About Virtru: While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you…

Full-time
VirtruWashington, District of Columbia, United States

Est. 215,000 USD

About Virtru: While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you…

Full-time
VirtruRemote

Est. 120,000 USD

About Virtru: While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you…

Full-timeRemote
VirtruWashington, District of Columbia, United States

Est. 180,000 USD

About Virtru: While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you…

Full-time
Future VirtruvianSep 30, 2022
VirtruWashington, District of Columbia, United States

Est. 124,000 USD

About Virtru: While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you…

Full-time
Technical Writer11 days ago
VirtruRemote

Est. 62,400 USD

About Virtru: While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you…

Full-timeRemote
VirtruRemote

Est. 210,000 USD

About Virtru: While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you…

Full-timeRemote
VirtruRemote

Est. 185,000 USD

About Virtru: While the rest of the security industry obsesses over locking data down to prevent it from being lost or stolen, we're doing something fundamentally different at Virtru. We're setting data free so that you…

Full-timeRemote
VannevarRemote

Est. 182,500 USD

Vannevar is a defense technology company building AI to deter our adversaries. In the 21st century, conflict moves at algorithmic speed and foresight equals firepower. Our agentic AI is purpose-built to compete with Chin…

Full-timeRemote
VeracodeLondon, United Kingdom

Est. 90,000 GBP

Looking for an innovative, high-growth, multi-award-winning company in one of the hottest segments of the security market? Look no further than Veracode! Veracode is a global leader in Application Risk Management for the…

Full-time
VectraAustin, Texas, United States

Est. 155,000 USD

Vectra® is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises. The Vectra AI Platform delivers integrated signal across public cloud, SaaS, identity, and data center networks in…

Full-time
VercelSan Francisco, California, United States

Est. 260,000 USD

About Vercel: Vercel is the agentic infrastructure company. We free people and agents to ship what’s next. For more than a decade, Vercel has shaped how the web is built. As the team behind Next.js, v0, and AI SDK, we cr…

Full-time
VercelSan Francisco, California, United States

Est. 260,000 USD

About Vercel: Vercel is the agentic infrastructure company. We free people and agents to ship what’s next. For more than a decade, Vercel has shaped how the web is built. As the team behind Next.js, v0, and AI SDK, we cr…

Full-time
VannevarRemote

Vannevar is a defense technology company building AI to deter our adversaries. In the 21st century, conflict moves at algorithmic speed and foresight equals firepower. Our agentic AI is purpose-built to compete with Chin…

Full-timeRemote
LVTAmerican Fork, Utah, United States

Est. 144,000 USD

ABOUT LVT LVT is redefining how businesses operate in the physical world, moving beyond traditional security solutions to deliver AI-driven, actionable intelligence that makes sites smarter, safer, and more secure. Since…

Full-time
VerkadaSan Mateo, California, United States

Est. 250,000 USD

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality senso…

Full-time
VulnCheckRemote

Est. 140,000 USD

Engineering Manager, Rapid Response Assignment - US Location: Remote (United States (MA / Austin TX / MD) Team: Product & Engineering Employment Type: Full-Time About VulnCheck Exploitation prevention is only as stro…

Full-timeRemote
VulnCheckRemote

Est. 124,000 USD

Software Engineer, Rapid Response Assignment - (US) Location: MA / Austin TX / MDTeam: Product & EngineeringEmployment Type: Full-Time, Remote About VulnCheckExploitation prevention is only as strong as the intellige…

Full-timeRemote
VerkadaSan Mateo, California, United States

Est. 250,000 USD

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality senso…

Full-time
VeracodeRemote

Est. 80,000 GBP

Looking for an innovative, high-growth, multi-award-winning company in one of the hottest segments of the security market? Look no further than Veracode! Veracode is a global leader in Application Risk Management for the…

Full-timeRemote
VerkadaSan Mateo, California, United States

Est. 250,000 USD

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality senso…

Full-time
Veeam SoftwareSan Jose, California, United States

Est. 339,650 USD

Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in…

Full-time
VerkadaSan Mateo, California, United States

Est. 250,000 USD

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality senso…

Full-time
VercelSan Francisco, California, United States

Est. 260,000 USD

About Vercel: Vercel is the agentic infrastructure company. We free people and agents to ship what’s next. For more than a decade, Vercel has shaped how the web is built. As the team behind Next.js, v0, and AI SDK, we cr…

Full-time
VulnCheckRemote

Est. 124,000 USD

Senior Vulnerability Analyst Location: MA / Austin TX / MDTeam: Research Employment Type: Full-Time, Remote About VulnCheck Exploitation prevention is only as strong as the intelligence driving those efforts, and most of…

Full-timeRemote