Staff Engineer, Application and Product Security

Sorry, this job was removed at 01:02 p.m. (CST) on Monday, Nov 25, 2024
Be an Early Applicant
Bengaluru, Karnataka
Hybrid
Fintech
The Role

Greenlight is the leading family fintech company on a mission to help parents raise financially smart kids. We proudly serve more than 6 million parents and kids with our award-winning banking app for families. With Greenlight, parents can automate allowance, manage chores, set flexible spend controls, and invest for their family’s future. Kids and teens learn to earn, save, spend wisely, and invest. 


At Greenlight, we believe every child should have the opportunity to become financially healthy and happy. It’s no small task, and that’s why we leap out of bed every morning to come to work. Because creating a better, brighter future for the next generation depends on it.


We are looking to hire a Staff Application Security Engineer to lead us in designing and building security into software application services, in an exciting and agile cloud-native, mobile-first, Kubernetes-based microservices environment. Your work will ensure that Greenlight’s products remain safe against advanced threats, honor the privacy rights of our users, and satisfy several fintech compliance regimes. Cyber threats have proven to be highly capable of compromising “best practice” security, therefore, we will rely on you to blaze a cutting edge trail so we can stay ahead of the curve.

What you will be doing:

  • Implement and maintain DevSecOps tools, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), and secret scanning.
  • Execute and refine security testing protocols, including penetration testing, Dynamic Application Security Testing (DAST), API security testing, web testing, and mobile testing.
  • Automate high-fidelity end-to-end (E2E) testing for all API changes before production deployment. Integrate with existing engineering processes. 
  • Lead Product Security Incident Response Teams (PSIRT) playbook, mature detection and response rules, and actively neutralize against product security threats (such as Account Takeover, API abuse, etc).
  • Lead and execute threat modeling exercises across varying scope of the organization. Identify security gaps and control recommendations, including client and server-side controls.
  • Design, review, and manage security controls, including user registration, authentication/authorization, password management, account takeover protection, and application layer threat detection. Enhance security tool accuracy and oversee vendor/open-source proof-of-concepts (PoVs).
  • Evangelize and promote standardized application logging practices across the organization.
  • Evaluate and provide strategic guidance on mitigating security risks efficiently.
  • Contribute to various aspects of the Information Security Program, including data privacy, penetration testing, audit evidence production, security awareness training, and enterprise risk management.
  • Guide engineers at all levels in designing and integrating security aspects into Greenlight’s products, services, and software development lifecycle (SDLC). Evangelize security culture through security champion program and technical developer-focused security training. 

What you bring:

  • 10+ years of experience in application and product security with a strong software engineering foundation
  • Expert understanding of mobile, web, cloud, container, and cryptographic technologies and security practices.
  • Offensive security minded with in-depth knowledge of current and emerging cyber threats, testing procedures, and their mitigations.
  • The ability to quickly and deeply learn new technology stacks and modern CI/CD pipelines, including Docker, Kubernetes, AWS, Kotlin, Node.js, Android, iOS, Swift, and gRPC.
  • Strong independent critical thinking with the capability to form and defend opinions through knowledge sharing.
  • Skillful in assessing and managing security risks with a pragmatic solution-first approach.
  • Commitment to continuous improvement, ongoing education and knowledge sharing with peers.
  • A humble, collaborative, and supportive approach to teamwork
  • Relevant certifications (e.g OSCP, OSWE, GWAPT, GMOB, CISSP) are a plus.

At Greenlight, your expertise will help us build and maintain the highest standards of security, ensuring a safe and reliable experience for our users. If you are passionate about advancing security practices and thrive in a high-growth, innovative environment, we encourage you to apply. 


Who we are:

It takes a special team to aim for a never-been-done-before mission like ours. We’re looking for people who love working together because they know it makes us stronger, people who look to others and ask, “How can I help?” and then “How can we make this even better?” If you’re ready to roll up your sleeves and help parents raise a financially smart generation, apply to join our team.


Greenlight is an equal opportunity employer and will not discriminate against any employee or applicant based on age, race, color, national origin, gender, gender identity or expression, sexual orientation, religion, physical or mental disability, medical condition (including pregnancy, childbirth, or a medical condition related to pregnancy or childbirth), genetic information, marital status, veteran status, or any other characteristic protected by federal, state or local law.

Similar Jobs

TransUnion Logo TransUnion

AVP - Data Upload

Big Data • Fintech • Information Technology • Business Intelligence • Financial Services • Cybersecurity • Big Data Analytics
Hybrid
World Trade Center, Yeshwanthpur, Bengaluru Urban, Karnataka, IND
10-10

Metropolis Technologies Logo Metropolis Technologies

Human Resources, Intern

Artificial Intelligence • Computer Vision • Machine Learning • Payments • Real Estate • PropTech
Easy Apply
In-Office
Bengaluru, Bengaluru Urban, Karnataka, IND

ServiceNow Logo ServiceNow

Servicenow Engineer

Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Hybrid
Bangalore, Bengaluru Urban, Karnataka, IND

ServiceNow Logo ServiceNow

Software Engineer

Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Remote or Hybrid
Bangalore, Bengaluru Urban, Karnataka, IND
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
Atlanta, GA
275 Employees
Year Founded: 2014

What We Do

Greenlight makes a debit card for kids and a mobile app that empowers parents with convenient controls to safely manage family finances and create teachable moments around earning, spending, saving and giving. Greenlight is easier and more flexible than cash, with parental controls that allow families to manage exactly where, and how much their kids can spend.

Similar Companies Hiring

Amplify Platform Thumbnail
Fintech • Financial Services • Consulting • Cloud • Business Intelligence • Big Data Analytics
Scottsdale, AZ
62 Employees
Camber Thumbnail
Social Impact • Healthtech • Fintech
New York, NY
53 Employees
Rain Thumbnail
Web3 • Payments • Infrastructure as a Service (IaaS) • Fintech • Financial Services • Cryptocurrency • Blockchain
New York, NY
40 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account