Fulltime Network Security Engineer openings in San Francisco Bay Area, United States on September 06, 2022

Platform Security Engineer at Blue Signal Search

Location: San Francisco

Our client delivers innovative technology used to support atmospheric imagery and analytics. To support their growth, they are looking to hire a Platform Security Engineer to oversee and support AWS security processes.

The Platform Security Engineer will be responsible for planning, designing, and implementing cloud security frameworks and controls across various platforms and applications to support DevOps processes. This role will work with internal and external stakeholders to solve security challenges and think strategically to develop and implement changes to drive automation, scalability, and continuous progress for platform security processes.

This Role Offers:
• Competitive base salary plus equity, and incredible benefits package including medical/dental/vision, 401K, unlimited PTO, and more.
• Company driven by mission to improve national security, commerce, and conservation.
• Close-knit, family-oriented company – they celebrate their wins and accomplishments together as a team.
• Culture of integrity, high performance, and innovative ideas.
• High level of control over project goals, process, and system features.
• Innovative work environment with access to top-rated and newest technologies.

Focus:
• Support the design, implementation, and maintenance of platform security frameworks and procedures in a DevOps environment.
• Oversee DevSecOps activities including the automation, configuration, integration, and deployment of platform security.
• Implement automation scripts using AWS automation frameworks.
• Develop security operations procedures and protocols that will provide appropriate situational awareness and clear remedial action plans.
• Collaborate with internal teams to drive production infrastructure to support business requirements and to enhance the platform’s security.
• Align standards, frameworks, and security with overall business and technology strategy. Identify and communicate current and emerging security threats.
• Install, monitor, and maintain security controls.
• Lead, train, and mentor junior colleagues on platform security. Act as technical SME on AWS cloud services, tools, and strategies.
• Oversee all required security documentation, policy enforcement, and approvals of DevOps processes from a security perspective.
• Review and evaluate technology for future risks and opportunities to improve security implementation and automation.

Skill Set:
• 4+ years of experience in platform security engineering.
• Bachelor’s degree in Information Systems, Computer Science, or related discipline. CISSP, CISM, GWAP, AWS Solutions Architect, or similar certifications preferred.
• Must have enterprise security experience in a DevSecOps environment.
• Hands-on experience in security operations, security policy development, and risk analysis concepts.
• Proven experience with AWS cloud services (VPC, IAM, Cognito, Lambda, etc.) and deploying and managing container orchestrator such as K8s/ECS etc.
• Expertise in security automation, CI/CD, and network security.
• Technical fluency in Bash, Python, and AWS API.
• In-depth knowledge and experience with security and regulatory compliance.
• Ability to see big picture goals and create actionable roadmaps for security programs, technology, and business initiatives to get there.
Apply Here
For Remote Platform Security Engineer roles, visit Remote Platform Security Engineer Roles

********

Staff Platform Software Security Engineer at PlayStation

Location: San Francisco

PlayStation isn’t just the Best Place to Play —it’s also the Best Place to Work. We’ve thrilled gamers since 1994, when we launched the original PlayStation. Today, we’re recognized as a global leader in interactive and digital entertainment. The PlayStation brand falls under Sony Interactive Entertainment, a wholly-owned subsidiary of Sony Corporation.

Staff Platform Software Security Engineer

San Mateo, CA

We seek a security engineer to spearhead low-level software security initiatives across our current and future PlayStation consoles. You will join an elite team focused on software and hardware security, design and code reviews, penetration testing and system hardening efforts. You will be working to break and secure cutting-edge technology – tackling how to take full advantage of all available resources to maximize security.

Here, you will have opportunities to steer and improve the security throughout the PlayStation platform. The team is involved throughout product development, from early design to production and future updates. From silicon design, to secure boot, to a custom operating system and applications, you will tackle challenging technical security problems at all areas of the console. We are looking for candidates who are excited about diving into a complex system, figuring out all the possible weak points, and designing ways to mitigate or eliminate these risks.

This team sits between security research, design, and development. You will have opportunities to develop security tools, research new ideas, design security systems, as well as find software & hardware vulnerabilities in design and implementation. Finally, you must be able to clearly present your results and findings to development teams or as an executive summary.

If this is you, please apply

Responsibilities:
• Discover security issues and improve security for products shipped to over 100M people worldwide
• Design and/or review software security architecture
• Design and/or review hardware security architecture
• Conduct source code security review using dynamic and static analysis tools, and manual review
• Pitch and prototype new security mitigations
• Develop proof-of-concept exploits and validate attack flows
• Develop frameworks to enable full-system security evaluations
• Work closely with development teams during design, implementation and review of new security features
• Evaluate security research and incorporate into our design and review flows
• Triage and evaluate console security issues from external security researchers
• Improve automation of security analysis and review

Required and Nice-to-Have:
• Secure coding, safe computing practices, and code development
• Trusted system design: you are familiar with secure boot, TPMs, and attestation
• Operating system design and security best practices
• Hypervisor design and security best practices
• Hardware security topics such as glitching, side-channel attacks, and JTAG
• Software security topics such as C/C++ security issues and cryptography best practices
• Vulnerability research/assessment: you have discovered subtle vulnerabilities in production code
• Software exploitation and mitigation bypass techniques: you have exploited vulnerabilities on modern systems with layered mitigations
• Cryptography engineering: you have designed and/or reviewed complex systems protected with cryptography
• Security architecture: you have designed and/or reviewed the security architecture for large, complex systems
• x86 and ARM architectures
• Ability to clearly communicate security concerns and collaborate with teams on resolving these concern

#LI-KS1

Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to race, color, religion, gender, pregnancy, national origin, ancestry, citizenship, age, legally protected physical or mental disability, covered veteran status, status in the U.S. uniformed services, sexual orientation, marital status, genetic information or membership in any other legally protected category.

Reasonable Accommodation Notice Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.

We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond.

We sincerely appreciate the time and effort you spent in contacting us and we thank you for your interest in PlayStation.

PRIVACY NOTICE TO SIE LLC’S JOB APPLICANTS

This Privacy Notice explains what personal information we at Sony Interactive Entertainment LLC collect from you, and why we collect it and use it. This Notice covers our practices regarding the personal information of all applicants to our job positions. Please review it carefully.

Categories of personal information we collect from you

We collect personal information about you throughout the recruiting process, in particular the following categories. Generally, we obtain this information through our Recruiting Team:

A. Identification and contact information
• * Direct identifiers such as your first and last name.
• Indirect identifiers such as a government ID, your Social Security, work permit or passport #.
• Contact information such as your email address, mailing address, telephone number.

B. Other information about you or that can be associated with you such as:
• Sensitive/Protected Data. During the recruitment process, you may (voluntarily) provide us with your ethnicity, gender, military service information, or physical or mental health information, as well as your national origin and citizenship.
• Professional or job position-related information, including your past professional experience, references; background verification; talent management and assessment; information regarding any conflicts of interests; and the terms and conditions of your job offer.
• Non-public education information, including information about your education records, such as grades and transcripts.
Apply Here
For Remote Staff Platform Software Security Engineer roles, visit Remote Staff Platform Software Security Engineer Roles

********

Senior Security Engineer at Amazon.com, Inc.

Location: San Francisco

DESCRIPTION

About Us

Launched in 2011, Twitch is a global community that comes together each day to create multiplayer entertainment: unique, live, unpredictable experiences created by the interactions of millions. We bring the joy of co-op to everything, from casual gaming to world-class esports to anime marathons, music, and art streams. Twitch also hosts TwitchCon, where we bring everyone together to celebrate, learn, and grow their personal interests and passions. We’re always live at Twitch. Stay up to date on all things Twitch on Linkedin, Twitter and on our Blog.

About the Role

Twitch is looking for a Senior Engineer to join the Video Team reporting to the Director of Video Tooling. The team designs essential security controls and event monitoring technologies, contributing to Security concerns across the team, and being general Security experts for all kinds of multiple needs. We’re looking for a person that wants to participate in a positive, encouraging team that cares about the people it protects.

As a Senior Engineer, you will provide technical direction, oversight, and execution guidance for several of the team’s ongoing projects. Engineers will turn to you when they’re not sure how to do something, or which technology option best suits a project. The engineers on this team are focused on individual security project execution; the Senior Engineer is focused on major project security consulting and providing essential design and direction guidance for new projects. We do not expect expertise in all of the team responsibility areas, but we do expect you to be fluent with almost all of them and demonstrate technical expertise in several.

You can expect to learn about all of them to some degree as you spend time on this team and as your role expands. We do not expect that you’re an expert in all of these responsibilities. We want you to be familiar with several of the team’s responsibility areas, or well versed in one of them and interested in the other areas.

This position can also be located be remote in the US or Vancouver BC.

You Will:
• Perform security reviews for new products, technologies, and services
• Influence decision-makers and team members throughout the organization in multiple teams to achieve a high security bar
• Develop security tools, security training and outreach to internal development teams
• Secure development life-cycle (SDLC) practices including threat modeling and security testing
• Guide penetration testing engagements and create new testing methods and exploits
• Develop metrics that improve desired behavior and security outcomes
• Guide security projects (including security reviews, tool development, and creation of new security practices) with end-to-end ownership

BASIC QUALIFICATIONS

You Have:
• Fluency with AWS
• 5+ years of demonstrated experience with focus in areas such as systems, network or security
• Previous hands-on and high-level experience in systems administration, network administration, or large environment security engineering
• Knowledge of web protocols and an in-depth knowledge of Linux/Unix tools and architecture
• background in Authentication and Authorization concepts
• Software development proficiency (Go, Python, etc.)
• Comprehension of algorithms and processes for programmatic automation via scripting or programming languages (Go, Python, shell, etc.)
• Background in host, network and application security
• BS degree in Computer Science, Computer Engineering, Electrical Engineering, or 8+ years equivalent technology experience

PREFERRED QUALIFICATIONS

Bonus Points
• Fluency with Go
• Masters from a Technical Science, Engineering, or Statistics program
• Published works, technical or otherwise, in the security space
• Avid user of Twitch with a passion for the Twitch community

Perks
• Medical, Dental, Vision & Disability Insurance
• 401(k)
• Maternity & Parental Leave
• Flexible PTO
• Commuter Benefits
• Amazon Employee Discount
• Monthly Contribution & Discounts for Wellness Related Activities & Programs (e.g., gym memberships, off-site massages)
• Breakfast, Lunch & Dinner Served Daily
• Free Snacks & Beverages

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Pursuant to the Los Angeles Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

We are an equal opportunity employer and value diversity at Twitch. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

The pay range for this position in Colorado and Connecticut is $120,000 – 160,000 yr; however, base pay offered may vary depending on job-related knowledge, skills, and experience. A sign-on bonus and restricted stock units may be provided as part of the compensation package, in addition to a full range of medical, financial, and/or other benefits, dependent on the position offered. This information is provided per the Colorado Equal Pay Act and CT House Bill Number 6380. Base pay information is based on market location. Applicants should apply via Twitch’s internal or external careers site.
Apply Here
For Remote Senior Security Engineer roles, visit Remote Senior Security Engineer Roles

********

Application Security Engineer, Kustomer at Meta

Location: Menlo Park

Kustomer’s Security team is seeking a passionate hacker who derives purpose in life by revealing potential weaknesses and then crafts creative solutions to eliminate those weaknesses. Your skills will be the foundation of security initiatives that protect the security and privacy of over a billion people.

You will be relied upon to scale up vulnerability detection and prevention as well as provide engineering and product teams with the security expertise necessary to make confident product decisions. Come help us make life hard for the bad guys.

Application Security Engineer, Kustomer

Responsibilities:
• Conduct regular security assessments
• Analyze, assess, and respond to various internet threats
• Analyze and assess recurring security issue patterns from security reviews and bug research programs
• Build prototypes of tools, exploit mitigations, libraries and frameworks used for vulnerability detection and/or prevention
• Use your native security expertise to refine those detection and prevention measures
• Drive for adoption of the aforementioned tools and frameworks to help developers build secure products and infrastructure
• Review new product features and changes to architecture for security, privacy, and compliance issues
• Take a leadership role in driving internal security and privacy initiatives
• Collaborate with engineering teams to resolve security-related findings
• Provide guidance to engineering and product on best practices around security and security architecture

Minimum Qualifications:
• Experience managing projects start-to-finish for development and deployment of security related processes or tooling
• Experience performing penetration tests
• Familiarity with native programming languages, development practices, and common bug patterns
• Familiarity with native analysis tooling and frameworks (fuzzing, static analysis, etc.)
• Effective communication skills
• B.S. or M.S. Computer Science or related field, or equivalent experience
• Cloud security and security architecture experience (reviewing tech specs, RFCs, etc.)

Preferred

Qualifications:
• Application security experience with SaaS B2B platforms
• Experience with JavaScript and related frameworks (e.g. node.js)
• Experience applying fixes to vulnerable code or other security findings
• Experience in contributions to the security community (public research, blogging, presentations, etc.)

Facebook is proud to be an Equal Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.

Facebook is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at .
Apply Here
For Remote Application Security Engineer, Kustomer roles, visit Remote Application Security Engineer, Kustomer Roles

********

Senior Security Engineer, Security at Amazon.com

Location: Dublin

Position: Senior Security Engineer, Payments Security

Description

Job summary

Amazon Payments Services build systems that process payments at an unprecedented scale, with accuracy, speed, and mission-critical availability. We process millions of transactions every day worldwide across various payment methods. Hundreds of millions of customers and merchants send hundreds of billions of dollars moving at light-speed through our systems annually. We are growing a new team to innovate and provide a seamless payment experience to our customers across all platforms like mobile, web, voice etc.

We are looking for a highly skilled, experienced, and motivated senior security engineer to join our Application Security team. This team owns all aspects of security for the features in the next generation of Amazon’s core payments platform.

Key job responsibilities

As a senior security leader, you will:

Secure the design and implementation of the most critical systems within Amazon’s core payments platform

Solve security challenges at a massive scale in a security-first, infrastructure as code, 100% AWS environment

Partner closely with our development teams to produce innovative and secure solutions

Proactively perform security assessments to prevent security vulnerabilities

Perform security testing before release

Conducting trainings and hackathons to raise developer awareness of security best practices

Be expected to be strong in multiple domains and will be sought out for advice on technical issues,

Have excellent time management skills along with the ability to deliver results in the face of uncertainty, and

Foster strong team culture

A successful candidate will be a deeply curious individual who brings technical and leadership expertise, and ability to work within a fast-paced startup culture in a large company that has broad business impact. This is a rare opportunity to get in on the ground floor and start on the Amazon Payments innovation as a security leader.Basic

Qualifications

BS in computer science, networking, information systems, computer engineering, or 6+ years’ equivalent experience

Minimum of 6 years’ experience in identifying security issues and risks, and developing mitigation plans

Minimum of 4 years’ experience in software architecture, design, implementation

Minimum of 4 years’ experience in areas such as cryptography, application security, threat modeling, penetration testing

Minimum of 4 years’ scripting or programming experience in Java, Python, Perl, Scala, or other languages

Experience performing secure code review

Hands-on experience using and/or securing AWS or other cloud computing environments

Experience in executive communications or technical writing; clear, concise, and thorough written and oral communication skills.Preferred

Qualifications

Experience with multiple programming languages (such as, Java, Python, C++, Scala, etc.) ·

Experience with vulnerability risk and impact assessment

Experience in driving large, cross-organization initiatives

Ability to make concrete progress in the face of ambiguity and imperfect knowledge (avoid “analysis paralysis”)

Strong information security risk-based prioritization abilities

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( to know more about how we collect, use and transfer the personal data of our candidates.Basic

Qualifications

BS in computer science, networking, information systems, computer engineering, or 6+ years’ equivalent experience

Minimum of 6 years’ experience in identifying security issues and risks, and developing mitigation plans

Minimum of 4 years’ experience in software architecture, design, implementation

Minimum of 4 years’ experience in areas such as cryptography, application security, threat modeling, penetration testing

Minimum of 4 years’ scripting or programming experience in Java, Python, Perl, Scala, or other languages

Experience performing secure code review

Hands-on experience using and/or securing AWS or other cloud computing environments

Experience in executive communications or technical writing; clear, concise, and thorough written and oral communication skills.Preferred

Qualifications

Experience with multiple programming languages (such as, Java, Python, C++, Scala, etc.) ·

Experience with vulnerability risk and impact assessment

Experience in driving large, cross-organization initiatives

Ability to make concrete progress in the face of ambiguity and imperfect knowledge (avoid “analysis paralysis”)

Strong information security risk-based prioritization abilities

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your…
Apply Here
For Remote Senior Security Engineer, Security roles, visit Remote Senior Security Engineer, Security Roles

********

The Tech Career Guru
We will be happy to hear your thoughts

Leave a reply

Tech Jobs Here
Logo