Remote Senior Application Security Engineer (JavaScript/TypeScript)

Description:

• LastPass is seeking a Senior Application Security Engineer specializing in JavaScript/TypeScript to join their Product Security team.
• The role involves collaborating with software engineers, product owners, and the architecture team to implement security best practices across products.
• Responsibilities include enhancing product security, understanding application security needs, and ensuring secure product development.
• The engineer will conduct application security design reviews, threat modeling, and code reviews.
• The position requires debugging and troubleshooting complex server-side applications written in JavaScript/TypeScript.
• The engineer will apply penetration testing skills to strengthen internal and external applications and services.
• Support for the bug bounty security researcher community is also part of the role.

Requirements:

• Candidates must possess excellent written and verbal communication skills in English.
• A deep technical knowledge in web application security is required.
• Experience in developing and/or securing web applications written in JavaScript/TypeScript is essential.
• Basic knowledge of Docker and container security is necessary.
• Previous experience with threat modeling, testing, and analyzing server-side applications is required.
• Candidates should have a knack for identifying software flaws and effectively communicating solutions.
• Experience working closely with engineering teams throughout the Software Development Life Cycle (SDLC) is needed.
• A team player with a hands-on and can-do attitude is essential for this role.
• It is preferred, but not required, to have experience with .NET or PHP, React, GitLab CI/CD, and AWS (Amazon Web Services).

Benefits:

• LastPass offers a market-leading password manager and a high-growth, collaborative environment with inclusive teams.
• The company promotes a remote-first culture and provides competitive compensation.
• Flexible Paid Time Off policies are available, including Quarterly Self-Care Days (4 extra paid days off annually) and Volunteer Days.
• Generous parental leave and comprehensive health coverage, including dependents, are provided.
• Support for home office setup is included.
• Employees can access a free LastPass account for up to 5 family members.
• Continuous learning and development opportunities are available to all employees.