Poshmark jobs - Application Security Engineer

Security team at Poshmark is responsible for securing our application platform, cloud infrastructure, and IT systems to protect Poshmark and its 60 million Community members. As an Application Security Engineer, you will collaborate with other security and engineering teams on identifying vulnerabilities in our application while improving visibility and implementing application security best practices throughout SDLC.

Responsibilities

• Bake security into every stage of the software development lifecycle for Backend/Mobile/Web applications.
• Identify security gaps and vulnerabilities through SAST, DAST, SCA, threat modeling, penetration testing, code/design review.
• Mitigate identified vulnerabilities by providing and/or implementing technical solutions.
• Evaluate and integrate security tools and solutions to improve application security posture.
• Develop custom tools and automation that enable DevSecOps and SecOps.
• Lead and manage bug bounty programs.

Minimum Qualifications

• 3+ years of professional hands-on experience in application security
• Strong foundation of security architecture, protocols, vulnerabilities, and countermeasures.
• Strong understanding of secure coding standards and security risks (e.g. OWASP Top 10).
• Familiarity with cryptography primitives and fundamentals (e.g. SSL/TLS, PKI)
• Demonstrated experience in programming languages (e.g. JRuby, Java, Kotlin, Swift, and/or JavaScript) and development tools (e.g. Gradle, Jenkins).
• Ability to juggle multiple responsibilities and prioritize automation over manual process.
• Strong attention to detail and accountability under minimal supervision.
• Strong growth mindset.

Preferred Qualifications

• Experience in developing production-level software at scale.
• Understanding of AWS infrastructure and security.
• Experience in security incident detection and response.
• CISSP or equivalent security certification

Why Poshmark?

Poshmark is a leading social commerce platform for the next generation of retailers and shoppers. Through technology, our mission is to build the world’s most connected shopping experience, while empowering people to build thriving retail businesses. Since launching in 2011, Poshmark has become a vibrant social shopping community with five million Seller Stylists helping 60 million users discover items they love from over 100 million listings. The company is backed by the world’s leading investment firms including Mayfield, Menlo Ventures, GGV Capital, Temasek, Inventus Capital, Uncork Capital, Union Grove Venture Partners, Shea Ventures and AngelList.