Security Engineer - AppSec, Senior (Multiple Locations)

Company: Evidation Health
Location: San Mateo
Posted on: February 25, 2021

Job Description:

Security Engineer - AppSec, Senior (Multiple Locations) *Considering candidates in San Mateo, Santa Barbara, or US based remote* Evidation Health is a new kind of health and measurement company that provides the technology and guidance to understand how everyday behavior and health interact. The volumes of behavior data generated from wearables and smartphones has opened up new ways to analyze individuals' behavior and health in real time. With a virtual pool of 3 million research participants, Evidation Health undertakes research for innovative biopharma and health care companies to transform how diseases are identified, treated, and monitored. The Security Team is responsible for all aspects of security at Evidation. This includes working with engineering teams to secure our development lifecycle, working with IT to maintain daily operational security, and working with DevOps to ensure the security of our cloud infrastructure. RESPONSIBILITIES In this role, you will primarily focus on the security of our systems and applications, including securing our architecture, implementing mitigations, threats detection and monitoring, and participate in defining the long-term strategy for our application security. You will work closely with our software engineering teams as they design and implement scalable, secure solutions that power large-scale, innovative research initiatives. This role is ideal for someone with strong experience in application security who is looking to take their security career to the next level with the ownership of a complex set of applications and exposure to a broad range of security technologies and domains. QUALIFICATIONS Minimum Qualifications:

• Experience with Linux-based systems
• 3+ years of software design and development experience (mobile or backend)
• 5+ years of application security experience or equivalent mix of software engineering and security experience
• Fluency at a high-level in at least one programming languages (e.g., Python, Ruby) with Ruby preferred
• Fantastic communication skills, especially among audiences with differing technical backgrounds
• Strong security fundamentals, including threat modeling and secure design principles
• Familiarity with cryptographic primitives such as hashing, signing, and encryption
• Experience with security testing (penetration testing/red teaming)
• Familiarity with scalable systems and service-oriented architectures
• Experience with automating security workflows and operations
• Experience maintaining the security of applications throughout their lifecycle Preferred Qualifications:
  • Expert-level knowledge of Ruby
  • Experience with Ruby on Rails, Python, iOS, and Android security
  • Experience with AWS infrastructure
  • Experience with Terraform
  • Experience with at least one configuration management system (SaltStack/Puppet/Chef)
  • Experience with Docker and containerization security
  • Experience with CI/CD and secure SDLC
  • Proven ability to implement security automation in a fast-moving environment
  • Experience with software vulnerability blackbox testing including fuzzing BENEFITS
    • Health, dental, and vision benefits for you and competitive coverage for your family
    • Relocation support
    • Equity
    • Open vacation policy - take time when you need it
    • Support for remote work when needed
    • Relaxed work environment
    • Your choice of computing equipment and gear
    • Lots of opportunities for growth
    • Opportunity to work on fascinating challenges that improve people's lives Evidation Health values diversity and is committed to equal opportunity for all persons without regard to race, color, creed, religion, marital status, age, national origin or ancestry, political activity or affiliation, physical or mental disability, medical condition including genetic characteristics, marital status, sexual orientation, gender identity, sex or gender. Are you authorized to work lawfully in the United States? --*
      -- Will you now or in the future require visa sponsorship? --*
      -- U.S. Equal Opportunity Employment Information (Completion is voluntary) Individuals seeking employment at Evidation are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. You are being given the opportunity to provide the following information in order to help us comply with federal and state Equal Employment Opportunity/Affirmative Action record keeping, reporting, and other legal requirements. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file. Gender Please select Are you Hispanic/Latino? Please select Race & Ethnicity Definitions If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows: A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability. A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service. An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense. An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985. Veteran Status Please select Form CC-305 OMB Control Number 1250-0005 Expires 05/31/2023 Voluntary Self-Identification of DisabilityWhy are you being asked to complete this form? We are a federal contractor or subcontractor required by law to provide equal employment opportunity to qualified people with disabilities. We are also required to measure our progress toward having at least 7% of our workforce be individuals with disabilities. To do this, we must ask applicants and employees if they have a disability or have ever had a disability. Because a person may become disabled at any time, we ask all of our employees to update their information at least every five years. Identifying yourself as an individual with a disability is voluntary, and we hope that you will choose to do so. Your answer will be maintained confidentially and not be seen by selecting officials or anyone else involved in making personnel decisions. Completing the form will not negatively impact you in any way, regardless of whether you have self-identified in the past. For more information about this form or the equal employment obligations of federal contractors under Section 503 of the Rehabilitation Act, visit the U.S. Department of Labor's Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp . How do you know if you have a disability? You are considered to have a disability if you have a physical or mental impairment or medical condition that substantially limits a major life activity, or if you have a history or record of such an impairment or medical condition. Disabilities include, but are not limited to:
      • Autism
      • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, or HIV/AIDS
      • Blind or low vision
      • Cancer
      • Cardiovascular or heart disease
      • Celiac disease
      • Cerebral palsy
      • Deaf or hard of hearing
      • Depression or anxiety
      • Diabetes
      • Epilepsy
      • Gastrointestinal disorders, for example, Crohn's Disease, or irritable bowel syndrome
      • Intellectual disability
      • Missing limbs or partially missing limbs
      • Nervous system condition for example, migraine headaches, Parkinson's disease, or Multiple sclerosis (MS)
      • Psychiatric condition, for example, bipolar disorder, schizophrenia, PTSD, or major depression Disability Status Please select 1 Section 503 of the Rehabilitation Act of 1973, as amended. For more information about this form or the equal employment obligations of Federal contractors, visit the U.S. Department of Labor's Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp . PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Keywords: Evidation Health, San Mateo , Security Engineer - AppSec, Senior (Multiple Locations), Engineering , San Mateo, California