Staff Application Security Engineer

Remote

Applications have closed

GoFundMe

Start your fundraiser in minutes with tools to help you succeed. GoFundMe is the global leader in crowdfunding, trusted by 100+ million people.

View company page

Want to help us, help others? We’re hiring! 

GoFundMe is a global community of over 100 million people with the common purpose of helping one another. Our mission is to help people help each other by making it safe and easy for people to ask for help and support causes—for themselves, each other, and their communities. In 2022, GoFundMe joined together with Classy, a leading nonprofit fundraising software company that enables nonprofits to connect supporters with the causes they care about. Together, GoFundMe and Classy have empowered people and organizations to raise more than $25 billion since 2010. Our vision is to become the most helpful place in the world.

Join us! The GoFundMe team is searching for our next Staff Security Engineer to help build a secure platform for giving.

The Job…

  • Conduct regular application security assessments
  • Collaborate with engineering teams on architecture decisions and review pull requests
  • Handle application vulnerability reports received through third-party sources, review, prioritize, and work with the relevant engineering teams to remediate them
  • Assist with the development and delivery of secure coding training
  • Participate in security initiatives from brainstorming sessions to implementation
  • Work with incident response teams and participate in post-mortem investigation of security incidents
  • Participate in on-call rotation

You… 

  • 7+ years designing and building secure systems with engineering teams
  • Experience with OWASP Top 10 and other industry standards
  • Understanding of web application architecture and design principles
  • Prior experience working in a regulated environment
  • Experience in secure code review in languages such as: PHP, Python, Kotlin, JavaScript, and TypeScript.
  • Excellent written and verbal communication skills

Why you’ll love it  here...

  • Market competitive pay
  • Rich healthcare benefits including employer paid premiums for medical/dental/vision (100% for employee only plans and 85% for employee + dependent plans) and employer HSA contributions. 
  • 401(k) retirement plan with company matching
  • Hybrid workplace with fully remote flexibility for many roles
  • Monetary support for new hire setup, hybrid work & wellbeing, family planning, and commuting expenses
  • A variety of  mental and wellness programs to support employees   
  • Generous paid parental leave and family planning stipend
  • Supportive time off policies including vacation, sick/mental health days, volunteer days, company holidays, and a floating holiday
  • Learning & development and recognition programs
  • Gives Back Program where employees can nominate a fundraiser every week for a donation from the company
  • Inclusion, diversity, equity, and belonging are vital to our priorities and we continue to evolve our strategy to ensure DEI is embedded in all processes and programs at GoFundMe. Our Diversity, Equity, and Inclusion team is always finding new ways for our company to uphold and represent the experiences of all of the people in our organization.
  • Employee resource groups
  • Your work has a real purpose and will help change lives on a global scale.
  • You’ll be a part of a fun, supportive team that works hard and celebrates accomplishments together. 
  • We live by our core values: impatient to be great, find a way, earn trust every day, fueled by purpose
  • We are a certified Great Place to Work, are growing fast and have incredible opportunities ahead!

GoFundMe is proud to be an equal opportunity employer that actively pursues candidates of diverse backgrounds and experiences. We are committed to providing diversity, equity, and inclusion training to all employees, and we do not discriminate on the basis of race, color, religion, ethnicity, nationality or national origin, sex, sexual orientation, gender, gender identity or expression, pregnancy status, marital status, age, medical condition, mental or physical disability, or military or veteran status.

The total annual salary for this full-time position is $150,000 - $200,000 + equity + benefits.  As this is a remote position, the salary range was determined by role, level, and possible location across the US. Individual pay is determined by work location and additional factors including job-related skills, experience, and relevant education or training.

Your recruiter can share more about the specific salary range based on your location during the hiring process.  

 

Learn more about GoFundMe:

GoFundMe 2022 | Year in Help

GoFundMe Heroes

Why GoFundMe

We Support Justice + Equality

 

 

Tags: Application security Incident response JavaScript Kotlin Nonprofit OWASP PHP Python Security assessment Strategy TypeScript

Perks/benefits: Career development Competitive pay Equity Flex vacation Health care Home office stipend Medical leave Parental leave Wellness

Region: Remote/Anywhere
Job stats:  45  14  0

More jobs like this

Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.