Description:

The product security team is essential in identifying and mitigating risks within the Mural product.
The Application Security Engineer will execute the MURAL product security strategy.
Responsibilities include managing Mural’s public bug bounty submissions and SAST testing within the CI workflow.
The role involves collaborating closely with developers to expand security testing coverage and leading security reviews of MURAL product features.
The engineer will educate and promote secure coding best practices.

Requirements:

A minimum of 5+ years of experience in a product security focused role is required.
Experience with product security at a multi-tenant SaaS company is preferred.
Candidates should have experience with vulnerability management.
A deep understanding of web application and mobile application security risks is necessary.
Candidates must possess a deep understanding of Linux, Networking, Cryptography, and Cloud Architecture fundamentals.
Software development experience with Node.JS or other frameworks like React or Angular is preferred.
Familiarity with MongoDB, Node.JS, Ruby, and/or Python is preferred.
Participation in public or private Bug Bounty programs, or contributions to open source or community projects, presentations, or blog posts in the security space is encouraged.
An excellent command of English, both written and verbal, is required.

For roles based in New York City, California, Colorado, and Washington, the base salary ranges from $160,000 - $200,000 plus benefits.
Compensation will be determined by factors such as location, level, job-related knowledge, skills, and experience.
Certain roles may be eligible for variable compensation.
The company provides reasonable accommodations for individuals with disabilities during the job application or interview process and for performing essential job functions.