Duo Security
Our mission is simple: democratize security by making it easy and effective for everyone to use.

Senior Application Security Engineer - Duo at Duo Security (Remote)

| Remote
Sorry, this job was removed at 5:14 a.m. (CST) on Friday, December 17, 2021
Find out who’s hiring remotely
See all Remote jobs
Apply Now
By clicking continue you agree to Built In’s Privacy Policy and Terms of Use.
We are looking for a Senior Product Security Engineer to proactively identify and mitigate security risk to Cisco SBG- Duo.
What you will do:
• Lead threat modeling and security design reviews with engineering team and provide domain expertise in resolving complex security problems.
• See opportunities for automation and partner with engineering and security teams on its implementation.
• Develop and support offensive security testing and validation.
• Resolve, review, and triage security vulnerabilities as needed.
• Improve secure coding practices, application security requirements, automation, training, and metrics.
• Help to develop relevant application security training for engineering teams.
• Maintain an active understanding of industry practices for secure software development and incident response.
Who you are:
• You have experience implementing secure software lifecycle practices within an agile engineering organization and have successfully established relationships with engineering teams based on teamwork, empathy, and pursuit of perfection.
• You are empathetic and accountable while helping contribute to improve the security program and enhancing the customer's trust
• Extensive experience in information security and/or IT risk management with a focus on security, performance, and reliability
• Solid understanding of security protocols, cryptography, authentication, and authorization
• Good working knowledge of current IT and cloud risks and experience implementing security solutions
• Experience implementing multi-factor authentication, single sign-on, identity management or related technologies
• Ability to interact with a broad cross-section of personnel to explain and enforce security controls
• Demonstrate solid understanding in a few of the following areas: Web Application Security, Cloud Infrastructure, Operating system security, and Identity and Access Management AWS/Public Cloud experience; Security Controls & Tools for AWS Public Cloud Services.
• Practical experience working at a global scale, with peers and teams that are remote from each other and often working independently
• Experience with Amazon Web Services; Microsoft Azure, and/or Google Cloud are a plus
• Prior experience in bug bounty programs is a plus
• Ability to review proof-of-concept code (Python, C, Assembly) to determine functionality and feasibility.
• Knowledge of standard tools such as AppScan, BurpSuite, nmap, SemGrep, Nuclei, ZAP, Qualys, and Splunk.
3 reasons to apply:
• You are an experienced product/application security professional who is looking for new growth opportunities.
• You are passionate about security and helping others grok it and you'd like to do that at cloud-scale.
• You love the action that comes with being part of a high-performing product security team and want to work with a fast-growing security company.
Our team is committed to cultivating and preserving a culture of inclusion and connectedness. We are able to grow and learn better together with a diverse team of employees. The collective sum of the individual differences, life experiences, knowledge, innovation, self-expression, and talent that our employees invest in their work represents not only part of our culture, but our reputation and Cisco's achievement as well. In recruiting for our team, we encourage the unique contributions that all potential candidates can bring in terms of their education, opinions, culture, ethnicity, race, gender identity and expression, nationality, age, languages spoken, veteran's status, religion, disability, sexual orientation, and beliefs.
If this role is exciting to you, we encourage you to apply even if you don't meet all 100% of the description or qualifications. Finally, and most importantly, we are a proud Equal Opportunity Employer.
U.S. Vaccination Requirements
Cisco requires all U.S. employees to be fully vaccinated or have an approved religious or medical accommodation. Candidates accepting an offer must provide proof of vaccination status on their first day. If someone anticipates requesting an accommodation for this requirement, they must receive approval before the start date. Candidates receiving an offer will receive additional information about the accommodation process at the time of the offer. All offers of employment are contingent upon complying with Cisco's vaccination policy.
See More
Apply Now
By clicking continue you agree to Built In’s Privacy Policy and Terms of Use.

Where we are

Duo's Austin office is located in the heart of downtown.

Technology we use

  • Engineering
  • Product
  • Sales & Marketing
    • C#Languages
    • C++Languages
    • GolangLanguages
    • JavascriptLanguages
    • PythonLanguages
    • RLanguages
    • SqlLanguages
    • SwiftLanguages
    • D3JSLibraries
    • FluxLibraries
    • ReactLibraries
    • ReduxLibraries
    • CaffeFrameworks
    • Ember.jsFrameworks
    • ExpressFrameworks
    • Node.jsFrameworks
    • CassandraDatabases
    • Microsoft SQL ServerDatabases
    • MySQLDatabases
    • PostgreSQLDatabases
    • RedisDatabases
    • IllustratorDesign
    • InVisionDesign
    • PhotoshopDesign
    • SketchDesign
    • Adobe Creative SuiteDesign
    • MarvelDesign
    • Aha!Management
    • ConfluenceManagement
    • JIRAManagement
    • Microsoft ProjectManagement
    • TrelloManagement
    • WrikeManagement
    • SalesforceCRM
    • MarketoLead Gen
Previous
Next

What are Duo Security Perks + Benefits

Duo Security Benefits Overview

We like to keep everyone happy and healthy. From financial security to personal growth, we're here to support you.

Culture
Volunteer in local community
Partners with Nonprofits
Friends outside of work
Eat lunch together
Intracompany committees
Team owned deliverables
Team based strategic planning
Group brainstorming sessions
Open office floor plan
Diversity
Dedicated Diversity/Inclusion Staff
Highly diverse management team
Unconscious bias training
Diversity Employee Resource Groups
Hiring Practices that Promote Diversity
Health Insurance & Wellness Benefits
Flexible Spending Account (FSA)
Disability Insurance
Dental Benefits
Vision Benefits
Health Insurance Benefits
Life Insurance
Wellness Programs
Mental Health Benefits
Retirement & Stock Options Benefits
401(K)
401(K) Matching
Employee Stock Purchase Plan
Performance Bonus
Match charitable contributions
Child Care & Parental Leave Benefits
Generous Parental Leave
Flexible Work Schedule
Remote Work Program
Family Medical Leave
Adoption Assistance
Company sponsored family events
Vacation & Time Off Benefits
Generous PTO
Paid Volunteer Time
Paid Holidays
Perks & Discounts
Casual Dress
Company Outings
Stocked Kitchen
Home Office Stipend for Remote Employees
Professional Development Benefits
Job Training & Conferences
Tuition Reimbursement
Diversity Program
Lunch and learns
Cross functional training encouraged
Promote from within
Mentorship program
Continuing Education stipend
Time allotted for learning
Online course subscriptions available
Customized development tracks
Paid industry certifications

An Insider's view of Duo Security

How does your team reward individual success?

It can be as quick as some karma in Slack. We do team appreciations at the start of team meetings and Cisco has connected recognition which allows individuals to recognize the great work someone has done along with a monetary award, from $25 on up! We also celebrate life with team members, for example throwing a virtual baby shower!

Hector

Senior Engineering Manager

What's the biggest problem your team is solving?

Our cross-functional team of data scientists, software engineers, and designers, as well as product and security experts is building an intuitive adaptive authentication system. We’re moving past basic rule-based approaches to create a dynamic experience that people will love for keeping them secure while staying unobtrusive.

Brian

Head of Data Science and Engineering

What are some things you learned at the company?

Early on, I thought that success in the security industry was attributed solely to people's ideas or intellect. Since then, I've learned that the most important thing to have in any industry is empathy. Without empathy, you can't build a product that people will love or a place that people will want to work. Empathy is a foundation for success.

Olabode

Senior Data Scientist

What is your vision for the company?

My overall vision is to provide mechanisms for the business to build simple, safe and secure products that our customers and partners intrinsically trust. It is my belief that when we empower our teams and stakeholders to creatively work together instead of falling on process and procedure for the sake of it, our creativity opens to new heights.

Amanda

Head of Product Security

What makes someone successful on your team?

Success for us is taking the road less traveled to achieve better results, meaning we look for teammates who bring perspectives from all walks of life and who are not afraid to use their voice. We believe this combination results in good outcomes because we end up paving our path to success with a diversity of thought.

Amanda

Internal Communications Manager

More Jobs at Duo Security