Application Security Engineer
Hybrid
Full Time
#Animation
#Information Security
#Technology
#Security
#Penetration Testing
#SAST
#DAST
#IAST
#Cloud Security
#API Security
#DevSecOps
#CI CD
At LAIKA, we blend the artistry of stop-motion animation with groundbreaking technology to create films that captivate audiences around the world. Our Information Security team is currently looking for a dedicated professional to help us protect the creative vision and the proprietary digital infrastructure that makes our work possible. As we push the boundaries of what is possible in animation, we need a security expert who can ensure our workflows remain resilient and secure from the initial animation stages all the way to the cloud.
About the Role
We are looking for a Senior Application Security Engineer to join our team on a full-time basis. In this role, you will be a key partner to our software engineers, site reliability engineers, and technology leadership. You will be responsible for designing and implementing robust security strategies, conducting thorough vulnerability assessments, and performing penetration testing to safeguard our unique technical environment.
Key Responsibilities
- Conduct comprehensive security assessments and code audits to identify and mitigate potential vulnerabilities across our web applications, plugins, and cloud platforms.
- Manage and administer security testing tools, including SAST, DAST, and IAST, to ensure our applications meet high security standards.
- Collaborate with cross-functional teams to integrate DevSecOps best practices and provide guidance on secure architecture throughout the development lifecycle.
Requirements
To be successful in this role, you should possess a strong technical background and a passion for security. We are looking for the following qualifications:
- At least 5 years of experience in cybersecurity or 7 years of experience in software engineering with a primary focus on security.
- Proven hands-on experience with application penetration testing and a deep understanding of cloud and API security.
- Proficiency in scripting or development, with a preference for Python, though experience with Go, Ruby, or Perl is also valuable.
- Familiarity with CI/CD security practices and public cloud architectures like AWS, Azure, or GCP.
- Relevant certifications such as OSCP, GPEN, or GWAPT are highly preferred.
Location
This position is based in Hillsboro, Oregon. We support a hybrid work model to provide flexibility for our team members.
Compensation and Benefits
We offer a competitive compensation package that is determined based on your unique skills and professional experience. Employees in this role are eligible for our hybrid work program, allowing for a balance between on-site collaboration and remote work.
LAIKA
9 views
