LastPass is looking for a Staff Application Security Engineer:
The LastPass Product Security team is looking for a Staff Application Security Engineer to join our team and help us ensure the security of our applications. We are a team of talented application security engineers, who work in a direct partnership with our engineering and platform teams.
If you are passionate about complex problem solving and motivated by scale, then this is the role for you!
Who will you work with?
As a Staff Application Security Engineer, you will partner with software engineers, product owners and our architect team to ensure security best practices across our products.
What are some of the exciting challenges you will be working on?
- Be part of a dedicated application security team responsible for improving the product security of LastPass
- Work closely with engineering and platform teams to understand their application security needs
- Use your knowledge of security architecture to ensure that our teams build secure products and services from the ground up
- Perform application security design reviews, threat modeling and code reviews
- Debug, troubleshoot complex client-side applications written in Javascript/Typescript
- Use your penetration testing skills to strengthen our internal and external applications and services
- Support our bug bounty security researcher community and maximize learning opportunities in our engineering processes
What does it take to work at LastPass?
- Excellent written and verbal communication skills in English
- Deep technical knowledge in web application security
- Experience developing and/or securing web applications written in Javascript/Typescript
- Basic knowledge of Docker and container security
- Previous experience with threat modeling, testing, and analyzing client-side applications
- A knack for finding flaws in software and you can effectively communicate how to fix them
- Previous experience in working closely with engineering teams and supporting them throughout the SDLC (Software Development Life Cycle)
- Team-player, hands-on and can-do attitude
It’s great, but not required:
- Experience with .NET or PHP
- Experience with React
- Experience with GitLab CI/CD
- Experience with AWS (Amazon Web Services)
