Description:

The Security Engineering team at Fullstory ensures that engineering teams can securely design, build, test, and maintain software and infrastructure.
The team focuses on establishing a "paved road" for engineers to deliver secure technologies with minimal friction.
This role reports to the Vice President of Security Engineering & GRC and champions the integration of security throughout Fullstory.
Responsibilities include running detailed code reviews, establishing secure-development practices, mentoring engineers, and advising on feature development.
Team members focus on continuous improvement against the maturity model and Secure Development Lifecycle (SDL) to enhance outcomes for teammates and build trustworthy services for customers.
Daily tasks may involve supporting engineers as a security subject matter expert, collaborating on architecting resilient services, performing technical security assessments, developing automation for security tooling, supporting third-party security consultants, and delivering interactive security training courses.

Requirements:

Candidates must have 5+ years of experience in software security roles or similar fields such as application security, security engineering, product security, or security research.
Proficiency in reading and writing software in two or more of the following languages: Go, Rust, Objective-C, React Native, or Python is required.
Candidates should be skilled in identifying vulnerability classes, performing root cause analysis, defining remediation paths in code, coordinating with engineers, and verifying fixes.
Direct experience in threat modeling, penetration testing, creating security requirements, performing source code reviews, or leading security design reviews is necessary.
Experience in building sustainable security programs with a focus on customer service, partnership, and enabling software engineering and product stakeholders is essential.

Fullstory offers autonomy and flexibility, including a remote-first work environment, flexible paid time off, and an annual company-wide closure.
Comprehensive benefits packages are provided for US-based employees, along with supplemental coverage options for international staff.
Professional development opportunities are available through training programs, career coaching sessions, and an annual learning subsidy.
A monthly productivity stipend is provided, and remote colleagues are reimbursed for their initial home office setup.
Employees can connect through various team events, including Employee Resource Group events and team off-sites.
Paid parental leave is offered to help employees balance family needs without financial stress.
A global fertility and family building benefit is available to support all journeys to growing a family.
Bereavement leave is provided, allowing employees to define their family and receive support during difficult times.
Miscarriage and pregnancy loss leave is available for employees and their partners, allowing them to take necessary time off.