Offensive Application Security Engineer
Unqork is a new way to build enterprise software: it's a purely visual, drag-and-drop no-code platform designed to support the scale, complexity and security that enterprise applications require. Our customers are leaders in insurance, financial services, healthcare and the public sector, and they use Unqork to build custom software faster, with higher quality and at lower costs than code-based approaches. Founded in 2017, Unqork reached unicorn status in 2020, with a valuation of $2B. Unqork has been named one of the Best Startup Employers by Forbes, Best Places to Work by Built In and one of LinkedIn's Top Startups.
Responsibilities:
- You will report to the Head of Customer Application Security
- Conduct architecture and configuration assessments on no-code applications built on Unqork
- You will leverage automated and manual security tools to identify security vulnerabilities prior to applications being promoted to production
- Build automated tools to scale application security in a no-code environment
- You will be a part of the "No-Code Red Team"
- Maintain an offensive/hacker mindset while building and validating threat models
- Conduct manual penetration testing, synthesizing the results and steps to mitigate
- Partner with Solution Architects to ensure mitigations are achieved
- You will work with technologies such as REST Api, Open Id Connect, SSO
- You will write/customize open source tools for security automation
Qualifications:
- 2+ years of experience
- Understanding of web application security threats, exploits, and prevention (NoSQL injection, XSS, CSRF, SSRF, etc)
- Understanding of API vulnerabilities and how to address them
- Ability to triage and recommend remediation for vulnerabilities
- Knowledge of tools including static code analysis and dynamic application scanning tools (SAST, DAST, etc)
Benefits:
- Work from home with an energetic remote-first community
- Unlimited PTO (and the encouragement to use it)
- Student loan payback program
- 100% employer-covered medical, dental, and vision options available to you and your dependents
- Flexible Spending Account (FSA)
- Monthly stipend toward your WFH setup, vacation, development and more
- Employer-sponsored 401(k) with contribution match
- Free Peloton membership through UHC
- Paid Parental Leave
Unqork is an equal opportunity employer, and proud to be committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.