Security Engineer II

Summary

Spotnana is seeking a Security Engineer II to join its global Security team. The role focuses on application security, including improving the secure SDLC, owning API security and penetration testing processes, identifying vulnerabilities, supporting incident response, and collaborating with engineering, product, and compliance teams.

Responsibilities

• Conduct application level security assessments (threat modeling, code reviews, penetration testing) of both internal tools and external Spotnana web and mobile applications
• Provide supporting guidance for bug-fixes on issues found through various channels (customer reported, internal testing, tools, external pen tests etc)
• Incorporate AI tools to accelerate our ability to detect and address application security vulnerabilities
• Develop API Security best practices
• Implement SAST, DAST, RAST, IAST and related tools to identify security bugs earlier in the release cycle
• Deliver training and awareness forR&D on security issues
• Be part of incident response team where application level context and triage is necessary to contain an issue
• Collaborate with security compliance functions to align technical controls with compliance requirements

Skills

• 3+ years of  previous web and mobile application security assessment experience
• Experience securing Java-based, API -driven microservices deployed in a cloud environment
• Experience with React (JS) for frontend and Java for backend services
• Previous experience implementing secure SDLC practices, and automations such as SAST, DAST, RAST, IAST in at least medium scale software development organizations
• Ability to write code in one or more programming languages
• Candidates must be legally authorized to work in the United States and must not require current or future employment sponsorship

Qualifications

Must Haves

• 3+ years of  previous web and mobile application security assessment experience
• Experience securing Java-based, API -driven microservices deployed in a cloud environment
• Experience with React (JS) for frontend and Java for backend services
• Previous experience implementing secure SDLC practices, and automations such as SAST, DAST, RAST, IAST in at least medium scale software development organizations
• Ability to write code in one or more programming languages
• Candidates must be legally authorized to work in the United States and must not require current or future employment sponsorship

Benefits

• Annual performance bonus
• Company equity
• Equity in the form of stock options, which provides partial ownership in the company, so you can share in the success of the company as it grows
• Pre-tax and ROTH 401(k) options via Fidelity with up to a 4% company match
• Comprehensive benefit plans covering medical, dental, vision, life, and disability effective on your hire date. We cover 100% of your employee premiums and 85% of your eligible dependents
• Pre-tax flexible spending account options for health, dependent care, and commuter expenses
• Flexible PTO in addition to 10 company holidays and an end-of-year company shutdown
• Up to 26 weeks of Parental Leave
• Monthly cell phone/internet stipend
• IATAN travel membership
• Pet insurance
• Financial wellness tools
• Calm app access