Demo

Staff Application Security Engineer

Ironclad Inc.
San Francisco, CA Full Time
POSTED ON 1/15/2025
AVAILABLE BEFORE 4/7/2025

Ironclad is the #1 contract lifecycle management platform for innovative companies. Every company, in every country, in every industry runs on contracts, but managing these contracts slows companies down and costs them millions of dollars. L’Oréal, Staples, Mastercard, and other leading innovators use Ironclad to collaborate and negotiate on contracts, accelerate contracting while maintaining compliance, and turn contracts into critical carriers of operational business intelligence. It’s the only platform flexible enough to handle every type of contract workflow, whether a sales agreement, an HR agreement or a complex NDA.

Ironclad is seeking a skilled Application Security Engineer with a passion for securing modern software platforms and protecting sensitive data. We are looking for someone with strong experience in automated vulnerability scanning and penetration testing to strengthen our application security program. The ideal candidate will have experience in software development or testing at SaaS companies or in regulated fields.

This role will be responsible for conducting security assessments, identifying and mitigating risks, and implementing security best practices and process improvements across Ironclad’s Product, Platform and Engineering teams.

Roles & Responsibilities :

  • Develop and implement secure coding practices, procedures, and standards for software development teams.
  • Conduct application security assessments and vulnerability testing to identify and mitigate risks.
  • Perform security reviews of code changes and ensure that security issues are addressed.
  • Collaborate with cross-functional teams to remediate software vulnerabilities and implement secure coding practices.
  • Integrate security review processes into Ironclad’s CI / CD pipeline.
  • Conduct threat modeling and risk analysis to protect sensitive data.
  • Provide domain expertise on protective controls including system, network, encryption, and authentication services.
  • Work closely with members of the SRE, Development, IT, and Security teams to drive impactful changes to Ironclad’s cybersecurity posture.
  • Work closely with the risk and governance teams to implement compliance and security requirements.
  • Contribute to secure coding and other cybersecurity training programs.
  • Stay up-to-date with the latest security trends, vulnerabilities, and attack techniques.
  • Provide technical leadership and mentorship to other members of the engineering and security teams.

Key Skills :

  • BA / BS / MS in Computer Science or related field or equivalent experience.
  • 3 Years of experience working in application security or software development, preferably with SaaS companies or in regulated fields.
  • In-depth knowledge of application security concepts and practices, including OWASP Top 10 and SANS Top 25.
  • Experience with SAST and SCA tools such as Snyk, Checkmarx, Veracode, WhiteSource, or Black Duck.
  • Experience with security testing tools such as Burp Suite, AppScan, and Nessus.
  • Experience with SOC 2, ISO 27001, NIST, and CIS standards and frameworks.
  • Experience operating in any cloud provider (AWS, GCP, Azure, Digital Ocean etc.).
  • Ability to appropriately prioritize and respond to different escalations.
  • Experience working collaboratively with cross-functional teams.
  • Strong desire to take ownership of problems.
  • Comfort working in a rapidly evolving environment and dealing with ambiguity.
  • Excellent communication, analytical and problem-solving skills.
  • Team and goal-oriented.
  • High output, low ego.
  • Nice to Have :

  • Strong proficiency in scripting and any programming languages (TypeScript, Java, Python, Ruby etc.).
  • Experience with git and software branching and workflow strategies.
  • Experience working with modern, microservice architectures including in Kubernetes or other containerized environments.
  • Experience with enterprise observability platforms such as ELK, Datadog, Prometheus, Grafana, etc.
  • Knowledge of Terraform or other infrastructure-as-code and configuration management solutions.
  • Benefits :

  • Health, dental, and vision insurance
  • 401k
  • Wellness reimbursement
  • Take what you need vacation policy
  • Generous parental leave for both primary and secondary caregivers
  • Base Salary Range : $190,000 - $210,000

    The base salary range represents the minimum and maximum of the salary range for this position based at our San Francisco headquarters. The actual base salary offered for this position will depend on numerous factors, including individual proficiency, anticipated performance, and the location of the selected candidate. Our base salary is just one component of Ironclad’s competitive total rewards package, which also includes equity awards (a new hire grant, along with opportunities for additional awards throughout your tenure), competitive health and wellness benefits, and a commitment to career growth and development.

    Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

    J-18808-Ljbffr

    Salary : $190,000 - $210,000

    If your compensation planning software is too rigid to deploy winning incentive strategies, it’s time to find an adaptable solution. Compensation Planning
    Enhance your organization's compensation strategy with salary data sets that HR and team managers can use to pay your staff right. Surveys & Data Sets

    What is the career path for a Staff Application Security Engineer?

    Sign up to receive alerts about other jobs on the Staff Application Security Engineer career path by checking the boxes next to the positions that interest you.
    Income Estimation: 
    $88,984 - $115,784
    Income Estimation: 
    $111,369 - $141,168
    Income Estimation: 
    $117,871 - $153,580
    Income Estimation: 
    $109,939 - $144,341
    Income Estimation: 
    $114,500 - $144,633
    Income Estimation: 
    $87,093 - $107,335
    Income Estimation: 
    $111,725 - $147,313
    Income Estimation: 
    $112,673 - $137,290
    Income Estimation: 
    $140,233 - $181,029
    Income Estimation: 
    $161,209 - $233,553
    Income Estimation: 
    $112,673 - $137,290
    Income Estimation: 
    $139,945 - $168,577
    Income Estimation: 
    $140,233 - $181,029
    Income Estimation: 
    $161,209 - $233,553
    Income Estimation: 
    $70,462 - $84,818
    Income Estimation: 
    $77,991 - $108,747
    Income Estimation: 
    $87,093 - $107,335
    Income Estimation: 
    $140,233 - $181,029
    Income Estimation: 
    $161,209 - $233,553
    View Core, Job Family, and Industry Job Skills and Competency Data for more than 15,000 Job Titles Skills Library

    Job openings at Ironclad Inc.

    Ironclad Inc.
    Hired Organization Address New York, NY Full Time
    Ironclad is the #1 contract lifecycle management platform for innovative companies. Every company, in every country, in ...
    Ironclad Inc.
    Hired Organization Address San Francisco, CA Full Time
    Ironclad is the #1 contract lifecycle management platform for innovative companies. Every company, in every country, in ...
    Ironclad Inc.
    Hired Organization Address San Francisco, CA Full Time
    Ironclad is the #1 contract lifecycle management platform for innovative companies. Every company, in every country, in ...
    Ironclad Inc.
    Hired Organization Address San Francisco, CA Full Time
    Ironclad is the #1 contract lifecycle management platform for innovative companies. Every company, in every country, in ...

    Not the job you're looking for? Here are some other Staff Application Security Engineer jobs in the San Francisco, CA area that may be a better fit.

    Staff Application Security Engineer

    IDENTIFY SECURITY, San Francisco, CA

    Staff Embedded Security Engineer

    Identify Security, San Francisco, CA

    AI Assistant is available now!

    Feel free to start your new journey!