SeatGeek believes live events are powerful experiences that unite humans. With our technological savvy and fan-first attitude we’re simplifying and modernizing the ticketing industry.
We are looking for an information security professional to lead our application security program. As a Senior Application Security Engineer, you’ll partner with product teams to help improve the security posture and design of both our enterprise and consumer-facing products.
You'll be part of a team developing a modern AppSec program with a highly automated approach to security coupled with a collaborative approach to working with Engineering partners. You’ll be operating in a fast paced, agile environment, with a goal of making security a key part of the product. It is a great opportunity to apply your years of AppSec experience in making SeatGeek products secure by default. As a foundational member of this team, you will have a huge impact on the product roadmap, and in building a trusting relationship with the engineering community.
What you'll do
1. Provide security guidance to engineering teams on new products and technologies
2. Taking ownership and driving the application security and privacy initiatives
3. Perform threat modeling and architecture review on upcoming features and products
4. Perform regular security assessments through penetration testing and code reviews of SeatGeek products
5. Encourage and train developers in secure coding practices
6. Develop security features in our product and scale security tools and processes through automation
7. Protect SeatGeek from bot attacks by tuning our edge protection and implementing app level protections
8. Continuously improve the Application Security Program and actively take part influencing its roadmap
What you have
9. Experience working in an AppSec role and have a solid understanding of security fundamentals
10. Proficiency in one or more coding languages (Python, C#, Go) i.e you can code and perform security code reviews
11. Experience in working with highly technical engineering teams
12. A history in performing threat modeling and architectural review for years
13. Experience in AWS is a plus
14. Interest in bug hunting and penetration testing (bonus points if you share your Bugcrowd/HackerOne profiles)
15. Experience contributing to the security community (public research, blogging, presentations, etc.)
Perks
16. Equity stake in a well-funded growth stage company
17. Flexible work environment, allowing you to work as many days a week in the office as you’d like or 100% remotely
18. A WFH stipend to support your home office setup
19. Benefits package that supports health and dental. We also provide annual subscriptions to Headspace
20. Pension
21. Life Insurance
22. Annual subscription to Spotify, Apple Music, or Amazon music
SeatGeek is committed to providing equal employment opportunities to all employees and applicants for employment regardless of race, color, religion, creed, age, national origin or ancestry, ethnicity, sex, sexual orientation, gender identity or expression, disability, military or veteran status, or any other category protected by federal, state, or local law. As an equal opportunities employer, we recognize that diversity is a positive attribute and we welcome the differences and benefits that a diverse culture brings. Come join us!
To review our candidate privacy notice, click here.