Application Security Engineer III
Remote
Full Time
#Engineering
#Penetration Testing
#Python
#BASH
#Go
#Threat Modeling
#Code Reviews
#Firewall
#Software
#Incident Response
#Compliance
Are you ready to help protect the content and data of millions of users? At Vimeo, we provide the world's most innovative video experience platform, empowering everyone from creative storytellers to global enterprises to bring their ideas to life. We are looking for a dedicated professional to join our team and help us safeguard the platforms that receive billions of views every month. If you are passionate about security and thrive in a collaborative environment, we would love to hear from you.
What you bring
As an Application Security Engineer III, you will play a vital role in our offensive and defensive security initiatives. This is a full-time, remote position that requires a mid-level professional who is comfortable working across various security domains. You will be responsible for protecting our systems from cyber threats while collaborating closely with our developers, infrastructure, and product teams. Your primary responsibilities will include:
- Conducting thorough penetration testing on our production and staging applications to identify potential vulnerabilities.
- Developing internal automated security tools using languages such as Python, BASH, or Go to support our security infrastructure.
- Performing detailed threat modeling and code reviews to ensure security best practices are integrated into our software development lifecycle.
Requirements
We are seeking a candidate with at least four years of total experience in engineering or application security, including a minimum of two years in software development, DevOps, or site reliability engineering. You should possess strong programming skills in languages like Python, Go, PHP, JavaScript, or Ruby, and have the ability to read across these languages. Expertise in application penetration testing tools and confidence working within cloud environments like AWS or GCP is essential. You must be comfortable with shell scripting and common SDLC tools, and you should be able to communicate complex security concepts clearly to our development teams. An upper-intermediate level of English is required, and we value candidates who are natural problem solvers and team players.
What we offer
We are committed to supporting our team members through a flexible work environment. As part of our benefits package, we offer:
- Full remote work flexibility.
How to Apply
We are excited to learn more about your background and how you can contribute to our security mission. Please submit your application to join our team and help us build a safer future for our global community of creators.
