Security Engineer, Application Security
Location
United States
Level
Senior
Department
Engineering
Type
Full - Time
Salary
Job Description
Posted on:
February 1, 2023
We’re looking for a Security Engineer, Application Security to join Grammarly Security. In this role, your decisions and actions will have a substantial impact on maintaining the trust of the millions of users who rely on Grammarly product offerings on a daily basis. You will have the opportunity to drive security improvements across the entire stack, from the UI through the back-end and down to the underlying server infrastructure.
Responsibilities
- Deep dive into our services and product offerings to review the security of the design and implementation of our applications.
- Perform black-box and white-box penetration testing of different product offerings and web services.
- Research and deploy the latest security assurance tools to identify and prevent security risks within CI/CD pipelines.
- Work with the product development teams, raising security awareness and offering expertise to keep our product offerings protected against known and unknown vulnerabilities.
- Root cause findings from the external security community through our bug bounty program.
- Represent Grammarly’s security engineering within and outside of the company.
Job Requirements
- Embodies our EAGER values—is ethical, adaptable, gritty, empathetic, and remarkable.
- Is able to collaborate in person 2 weeks per quarter, traveling if necessary to the hub where the team is based.
- Is a security practitioner with a proven record of security-focused technical contributions in application security, secure development, and penetration testing.
- Builds strong relationships with peers across the company to evangelize a security culture.
- Nurtures the talent in the team and raises the technical talent bar when recruiting for their team.
- Identifies impactful and practical solutions for security, from low-hanging fruit to long-term investments.