Remote Staff Security Engineer

Description:

• The Security Engineering team at Fullstory ensures that engineering teams can securely design, build, test, and maintain software and infrastructure.
• The team focuses on establishing a "paved road" for engineers to deliver secure technologies with minimal friction.
• This role reports to the Vice President of Security Engineering & GRC and champions the integration of security throughout Fullstory.
• Responsibilities include running detailed code reviews, establishing secure-development practices, mentoring engineers, and advising on feature development.
• Team members focus on continuous improvement against the maturity model and Secure Development Lifecycle (SDL) to enhance outcomes for teammates and build trustworthy services for customers.
• Daily tasks may involve supporting engineers as a security subject matter expert, collaborating on architecting resilient services, performing technical security assessments, developing automation for security tooling, supporting third-party security consultants, and delivering interactive security training courses.

Requirements:

• Candidates must have 5+ years of experience in software security roles or similar fields such as application security, security engineering, product security, or security research.
• Proficiency in reading and writing software in two or more of the following languages: Go, Rust, Objective-C, React Native, or Python is required.
• Candidates should be skilled in identifying vulnerability classes, performing root cause analysis, defining remediation paths in code, coordinating with engineers, and verifying fixes.
• Direct experience in threat modeling, penetration testing, creating security requirements, performing source code reviews, or leading security design reviews is necessary.
• Experience in building sustainable security programs with a focus on customer service, partnership, and enabling software engineering and product stakeholders is essential.

Benefits:

• Fullstory offers autonomy and flexibility, including a remote-first work environment, flexible paid time off, and an annual company-wide closure.
• Comprehensive benefits packages are provided for US-based employees, along with supplemental coverage options for international staff.
• Professional development opportunities are available through training programs, career coaching sessions, and an annual learning subsidy.
• A monthly productivity stipend is provided, and remote colleagues are reimbursed for their initial home office setup.
• Employees can connect through various team events, including Employee Resource Group events and team off-sites.
• Paid parental leave is offered to help employees balance family needs without financial stress.
• A global fertility and family building benefit is available to support all journeys to growing a family.
• Bereavement leave is provided, allowing employees to define their family and receive support during difficult times.
• Miscarriage and pregnancy loss leave is available for employees and their partners, allowing them to take necessary time off.