Application Security Engineer at Rocket.Chat

Are you ready to help secure the world's largest open-source communications platform? At Rocket.Chat, we empower organizations to collaborate without sacrificing data ownership or privacy. With tens of millions of users across 150 countries, including major entities like the U.S. Navy and Credit Suisse, we are on a mission to reconnect the world through secure, private conversations. We are looking for a passionate security professional to join our global team and help us build a safer digital future.

Role at a glance

We are seeking a mid-level Application Security Engineer to join our security team as a contractor. This is a full-time, 40-hour per week position that can be performed remotely from anywhere. You will report directly to our Head of Security and work within a diverse, multicultural environment spanning over 26 countries.

Your impact

• Protect our infrastructure by implementing robust security measures and proactively identifying and fixing vulnerabilities across our applications.
• Drive security automation by building internal tooling and streamlining our vulnerability management processes.
• Collaborate on development by performing threat modeling, conducting code reviews, and advocating for security best practices throughout the software development lifecycle.

What you'll need

To be successful in this role, you should possess a strong technical foundation and a proactive mindset. We value candidates who take ownership of their work and communicate transparently.

• Proven experience with penetration testing, specifically across web applications, APIs, cloud environments, or mobile platforms.
• Proficiency with security assessment tools such as Nessus, OpenVAS, Trivy, Semgrep, and GitHub Advanced Security.
• A solid grasp of application security standards, including the OWASP Top 10 and ASVS.
• Practical coding skills in languages like Python, JavaScript, Go, PowerShell, or Bash.
• Intermediate to advanced proficiency in English to collaborate effectively with our global team.
• A collaborative spirit and the ability to explain complex security risks to both technical and non-technical stakeholders.

Perks and compensation

We believe in supporting our team members with a flexible and rewarding work environment. Our benefits include:

• Flexible working hours to help you maintain a great work-life balance.
• Unlimited paid time off, including holidays and vacation days.
• Remote-first setup, including a company laptop, headphones, and a dedicated remote work benefit.
• Professional development support through access to iTalki, courses, and books.
• Equity in the form of stock options.
• A vibrant, multicultural company culture where you can grow alongside colleagues from all over the globe.