Chess.com
Security Engineer
🇺🇸 Remote - US
🕑 Full-Time
💰 TBD
💻 Cybersecurity
🗓️ May 22nd, 2025
Edtech.com's Summary
Highlights
- Triage and assess vulnerabilities in collaboration with engineering teams.
- Perform threat modeling and ensure designs adhere to security standards.
- Review penetration test results and manage security tasks using Jira.
- Use and evaluate security software, leading product demos and implementation.
- Guidance and advocacy for best security practices in Slack and Zoom.
- 3+ years experience in web application security.
- Familiarity with Burp Suite or similar tools.
- Proficiency in Python, PHP, or JavaScript.
- Compensation details not provided; full-time, remote position open globally.
- Friendly with collaboration tools like Slack and committed to continuous learning.
Security Engineer Full Description
Engineering
About You
- Triage, reproduce, and assess vulnerabilities submitted through the Bug Bounty Program, and work with the Engineering Teams to close the discovered gaps.
- Work closely with the Engineering Teams to perform Threat Models of their solutions, acting as a security advisor when appropriate, and ensuring designs are vetted and adhering to security industry standards.
- Review Penetration Testing results and SIEM reports. Translate the findings into actionable tasks in Jira and track them to completion.
- Apply updates to the WAF and various other security systems where applicable, and/or support the Engineering Teams to address findings.
- Evaluate security software and systems used by the company. Attend product demos to help determine the best solution for our company. Lead these efforts from beginning to end.
- Act as a security expert, guiding developers and projects to ensure security best practices.
- Be a security advocate in Slack and Zoom meetings. Proactively joining slack conversations to represent Security and provide guidance. We rely heavily on Slack for communications, so you should be comfortable with that, and a very active contributor within the Slack workspace.
Preferred Skills
- 3+ years professional experience in web application security
- Strong written communication skills in English
- Familiarity with Burp Suite or similar tools for viewing and tampering with web requests
- Prior experience with a Bug Bounty program is a plus
- Experience in Python, PHP or JS
- Strong collaboration and communication skills working in a fully distributed team primarily using Slack and some Zoom meetings
- Programmer mindset. We prefer to automate software that defends our systems.
- Sense of ownership and responsibility
- Chess player
- Lifelong learner
About the Opportunity
- This is a full-time opportunity
- We are 100% remote (work from anywhere!)
- This role is open to candidates from anywhere!
Similar Jobs
Information Security Compliance Manager
University of North Carolina - Charlotte
🇺🇸 Charlotte, NC
Information Security Systems Analyst
Bright Horizons
🇺🇸 Remote - US
IT Security Analyst, Associate
Purdue University
🇺🇸 Remote - US
Cybersecurity Risk Analyst I
University of Florida
🇺🇸 Gainesville, FL
IT Cybersecurity & Compliance Specialist
North Carolina State University
🇺🇸 Asheville, NC
