EasyPostEA

Senior Application Security Engineer

EasyPost is not only helping e-commerce companies with accurate tracking and logistics, we are delivering hope and spreading smiles to homes all across the country.

EasyPost

Employee count: 51-200

Salary: 125k-170k USD

United States only
Founded in 2012, EasyPost is a YC unicorn whose mission is to make shipping simple for businesses, from garage startups to the Fortune 500. Shipping, now more than ever, is the backbone of the global economy, but integrating the technology-enabled operations of a modern business with the low-tech and complex shipping industry has always been a challenge. EasyPost solves this problem with the first developer-friendly REST API for shipping, and we continue to push boundaries and discover new ways to simplify shipping for all. Our team is rapidly growing, and this is the perfect time to get on board. Join us, and help build the shipping infrastructure of the future.

Position Summary:

The Senior Application Security Engineer will play a critical role in maintaining and improving the security of EasyPost’s growing and evolving logistics ecosystem. Responsibilities will include identifying, planning, and completing high-impact security projects, reviewing new proposed product features, building new security systems and programs. The Senior Security Engineer will leverage their experience and creativity to protect millions of users, the company, and our partner organizations against both identified and emerging security risks.

Essential Duties and Responsibilities:

The essential functions include, but are not limited to the following:
o Lead the design, building and maintenance of security systems and infrastructure that support the organization's evolving business and security goals.
o Collaborate with other teams to integrate security and privacy controls and technology into the company’s overall planning and development process from project inception to project delivery.
o Build systems and programs that help security at EasyPost to scale efficiently in both breadth and depth of coverage.
o Embrace “shift-left” DevSecOps patterns, including infrastructure-as-code and Continuous Integration/Continuous Delivery design patterns that move security feedback to the earliest phases of product development and provide faster feedback to partner teams.
o Design and build key competitive security features within the product itself that will support continued business growth among security-conscious customers.
o Build and maintain security alerting infrastructure that delivers timely, relevant, and actionable alerts directly to internal staff, customers, and users.
o Create and maintain self-service documentation, training material, and knowledge base resources that help developers be more productive and write safer code.
o Work directly with MA entities to integrate their products and improve the overall security posture of their existing development and support environments.

Minimum Education Experience Qualifications:

o Bachelor's degree in computer science, management information systems, or related field.
o 8+ years of related experience, master’s degree and 6+ years of related experience, or equivalent related work experience.
o Comfortable writing production-ready code daily in at least two of the following languages: Python, Ruby, Go, or Rust.
o Ability to design systems that are simple to understand, maintainable, scalable, and resilient.
o Prior experience securing large-scale web applications and/or Application Programming Interfaces (APIs), including performing security design reviews, vulnerability assessments, and building testing strategies for logic flaws.
o The ability to understand and communicate concepts around threat modeling and risk management, including to both technical and non-technical stakeholders.
o Proven history of building strong partnerships with Engineering and Product teams to deliver world-class products and features.
o Working knowledge of several compliance and regulatory frameworks (SOC2, ISO 27001, SOX/ITGC, HIPAA, GDPR, CCPA, etc…)
o Experience in assessing risk and selecting key objectives during the vendor management lifecycle for software, hardware, cloud, and software-as-a-service vendors.
o Deep knowledge of how to build and maintain mixed computing environments (Linux, Windows, Mac OS, and mobile devices).
o Past experience with migrating applications and services to public cloud providers (AWS, GCP, Azure, etc…)

What We Offer:

o Comprehensive medical, dental, vision, and life insurance
o Competitive compensation package and equity
o Monthly work from home stipend of $50
o Flexible work schedule and paid time off
o Collaborative culture with a supportive team
o A great place to work with unlimited growth opportunities
o The opportunity to make massive contributions at a hyper-growth company
o Make an impact on a product helping ship millions of packages per day
Data Privacy Notice for Job Applicants:
For information on personal data processing, please see our Privacy Policy: https://www.easypost.com/privacy
"EasyPost is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law."
To be considered for this position, you must be authorized and based in the United States.

About the job

Apply before

Posted on

Job type

Full Time

Experience level

Senior

Salary

Salary: 125k-170k USD

Location requirements

Hiring timezones

United States +/- 0 hours

About EasyPost

Learn more about EasyPost and their company culture.

View company profile

EasyPost is not only helping e-commerce companies with accurate tracking and logistics, we are delivering hope and spreading smiles to homes all across the country. We push boundaries and change the status quo through our restful API, allowing companies greater control over their shipping. We continue to disrupt the shipping industry, and this is the best time to get on board. We are out to do things differently, to consistently change, grow, and progress. Join us in building the shipping infrastructure.

Employee benefits

Learn about the employee benefits and perks provided at EasyPost.

View benefits

Healthcare benefits

Medical, dental, and vision insurance.

Disability insurance

We'll cover your disability insurance.

Company events

Monthly virtual events for team building

Retirement benefits

401(k) to help you invest in your future.

View EasyPost's employee benefits
Claim this profileEasyPost logoEA

EasyPost

Company size

51-200 employees

Founded in

2012

Chief executive officer

Jarrett Streebin

Employees live in

View company profile

Similar remote jobs

Here are other jobs you might want to apply for.

View all remote jobs

5 remote jobs at EasyPost

Explore the variety of open remote roles at EasyPost, offering flexible work options across multiple disciplines and skill levels.

View all jobs at EasyPost

Remote companies like EasyPost

Find your next opportunity by exploring profiles of companies that are similar to EasyPost. Compare culture, benefits, and job openings on Himalayas.

View all companies

Find your dream job

Sign up now and join over 85,000 remote workers who receive personalized job alerts, curated job matches, and more for free!

Sign up
Himalayas profile for an example user named Frankie Sullivan
EasyPost hiring Senior Application Security Engineer • Remote (Work from Home) | Himalayas