airSlate
From airSlate's careers page
Status: listed on the employer's own careers page when we last checked (daily). Confirm on their site before applying.
We’re looking for people eager to shape products, scale a company, and thrive in a fast-moving environment.
airSlate is a global SaaS technology company that develops no-code workflow automation, electronic signature, and document management solutions. Our award-winning products - SignNow, pdfFiller, DocHub, altaFlow, Instapage, and US Legal Forms - serve over hundreds of millions of users and more than one million customers worldwide, helping organizations of every size digitize processes, improve efficiency, and transform how they work.
Our security team protects user data and keeps the airSlate platform stable. We work closely with product, engineering, and operations teams to reduce security risks at every stage, from design to production. We also monitor threats, run system audits, and help everyone in the company follow secure work practices. And now, we are looking for a Senior Security Engineer (Cloud & AppSec) who is prepared to contribute to the next chapter of our company's growth. The person will join our Security Engineering team of five and take on the responsibility of keeping our cloud infrastructure and products secure. As Senior Security Engineer, you will help product and engineering teams build secure products, find and fix risks early, and respond quickly when something goes wrong.
Secure our AWS and GCP environments: access management (IAM, least privilege, workload identities), network segmentation, encryption, and key and secrets management
Find and fix cloud misconfigurations and security risks before they cause problems
Set up security logging and monitoring, and investigate suspicious activity
Test the security of our web, mobile, and network-based applications
Run and improve our security scanning tools (SAST, DAST, SCA) and connect them to CI/CD pipelines
Help teams build secure products from the start by joining architecture reviews, threat modeling sessions, and risk assessments
Explain security findings clearly and work with engineers until the issues are fixed
Handle security incidents of different kinds (application, infrastructure, user-related): investigate, triage, contain, and write post-mortems
Prepare for SOC 2 and CASA audits and external assessments together with product and compliance teams
Configure and monitor our CDN
Hands-on experience securing AWS and/or GCP
Practical experience with SAST, DAST, and SCA tools, including choosing, setting up, and integrating them into CI/CD
Experience in security testing of web, mobile, or network applications
Experience in incident response, from investigation to post-mortem
Good knowledge of secure development practices across the SDLC, including threat modeling
Working knowledge of Bash, Python, Go, or Terraform
Clear communication skills and the ability to explain risks so that teams act on them
Previous experience as a DevOps engineer or developer
Scores your resume against this job the way resume scanners do: the job's hard and soft skills, searchability, recruiter tips and formatting.
Create a free account to see your score. Your resume stays in this browser until then, and we never store it.
Already a member? Sign in