About the role
What will you do at Spotnana?
The opportunity ahead
Spotnana is seeking an Security Engineer II to join our global Security team. As
an Security Engineer II focused on Application Security, you will be responsible
for improving Spotnana’s security and privacy position across our platform. As a
hands-on engineer, you will work closely with Spotnana Engineering and Product
teams to expand our secure SDLC, own our API security and penetration testing
processes, and advocate for best-practices across our codebase including
incorporation of security reviews earlier in our development cycle. The ideal
candidate has a strong engineering background and is passionate about working
cross-functionally with R&D teams to deliver secure, scalable solutions while
being able to describe the business value provided by reducing risks.
How you'll help us build
* Conduct application level security assessments (threat modeling, code
reviews, penetration testing) of both internal tools and external Spotnana
web and mobile applications
* Provide supporting guidance for bug-fixes on issues found through various
channels (customer reported, internal testing, tools, external pen tests etc)
* Incorporate AI tools to accelerate our ability to detect and address
application security vulnerabilities
* Develop API Security best practices
* Implement SAST, DAST, RAST, IAST and related tools to identify security bugs
earlier in the release cycle
* Deliver training and awareness forR&D on security issues
* Be part of incident response team where application level context and triage
is necessary to contain an issue
* Collaborate with security compliance functions to align technical controls
with compliance requirements
Experience you bring
* 3+ years of previous web and mobile application security assessment
experience
* Experience securing Java-based, API -driven microservices deployed in a cloud
environment
* Experience with React (JS) for frontend and Java for backend services
* Previous experience implementing secure SDLC practices, and automations such
as SAST, DAST, RAST, IAST in at least medium scale software development
organizations
* Ability to write code in one or more programming languages
What to expect next
Selected candidates will participate in cross-functional virtual interviews
exploring their relevant experience, approach to problem solving, critical
thinking, and alignment with Spotnana’s core values. Interviews will include
face-to-face conversations as well as coding exercises to demonstrate your
ability.
Work Authorization: This position is not eligible for employment-based visa
sponsorship. Candidates must be legally authorized to work in the United States
and must not require current or future employment sponsorship.
Let’s talk compensation
Spotnana strives to offer fair, industry-competitive, and equitable
compensation. Our total compensation package includes base salary, an annual
performance bonus, company equity, and comprehensive benefits. We use trusted
third-party market data to establish compensation ranges that are competitive
for the role, industry, company size, and geographic market, while maintaining
internal equity across our team.
Compensation
is determined based on a variety of factors, including skills,
experience, qualifications, and work location. The anticipated annual base
salary hiring ranges for this role are:
* New York Metro Area, San Francisco Bay Area, Seattle Metro Area:
$126,000-$170,000
* California, New Jersey, Washington, New York, Washington, D.C.,
Massachusetts, Connecticut: $120,500-$163,000
* Hawaii, Alaska, Maryland, Illinois, New Hampshire, Oregon, Colorado,
Virginia, Delaware, Minnesota, Rhode Island, Pennsylvania, Texas:
$115,000-$155,000
* All other U.S. states: $109,500-$147,000
Actual compensation may vary based on individual qualifications and the
applicable geographic market.
We care for the people who make everything possible - our benefits offerings
include:
* Equity in the form of stock options, which provides partial ownership in the
company, so you can share in the success of the company as it grows
* Pre-tax and ROTH 401(k) options via Fidelity with up to a 4% company match
* Comprehensive benefit plans covering medical, dental, vision, life, and
disability effective on your hire date. We cover 100% of your employee
premiums and 85% of your eligible dependents
* Pre-tax flexible spending account options for health, dependent care, and
commuter expenses
* Flexible PTO in addition to 10 company holidays and an end-of-year company
shutdown
* Up to 26 weeks of Parental Leave
* Monthly cell phone/internet stipend
* Extra perks — IATAN travel membership, pet insurance, financial wellness
tools, Calm app access, and more
Which skills does this role require?
Make your next move
Build a shortlist and prepare
Identify the requirements you can demonstrate, then choose examples from your work to discuss with the hiring team.
- Build a focused shortlist before you applyCompare role requirements with your experience and give each application a clear reason.
- Practice explaining your experience in an interviewRehearse your answers before meeting the hiring team.
Other roles to compare
Review the responsibilities and requirements before adding an opening to your shortlist.
AI Security Engineer
VEG ER for Pets · VEG Headquarters, White Plains, NY
Security Engineer [U.S. Citizenship, Secret or Top Secret Clearance Required]
Via Logic LLC · Ashburn, VA
OT Cybersecurity Engineer
Vulcan Elements · Research Triangle Park, NC
Mission Security Administrator II
True Anomaly · Denver, CO; Long Beach, CA
Insider Threat Monitoring Analyst - Mid-Level [U.S. Citizenship & CBP BI - High Trust Required]
Via Logic LLC · Ashburn, VA
IT Cybersecurity Engineer
Vulcan Elements · Benson, NC
Role information can change. Confirm current details on the original application page.
