Application Security Engineer at Outschool

Posted on: 04/21/2022

Location: (REMOTE)

full time

Crunchbase | Original Source

Tags: coverage node python postgresql typescript javascript aws react terraform express graphql kafka elasticsearch

THE COMPANY ----------- Outschool's mission is to inspire kids to love learning. We achieve this by linking learning to kids’ interests, connecting them with other classmates who share their passions, and giving them the autonomy to pick their own paths. Our small group classes meet over live video chat with teachers who celebrate their unique strengths and empower all learners to develop confidence and a strong sense of self. We're also focused on removing barriers for historically underserved learners who face systemic challenges to their success. In 2020, we started Outschool.org and began offering financial assistance to families in need. We are currently creating an Educator Endowment Fund to appreciate the teachers who are so central to our mission of inspiring kids to love learning. We believe that diversity drives learning. To meet our mission, we encourage, support, and celebrate different ideas, perspectives, and backgrounds. As a fully distributed (remote) team, we challenge one another to find the most effective way to empower learners, teachers, and parents. Your name, race, religion, gender, nationality, sexual orientation, and age are not barriers; they are why we want to work with you. We invite talented and creative candidates who value the importance of nurturing a child's boundless curiosity to join us on this journey. The pandemic has been challenging for families all over the globe. We acted quickly and worked together to provide quality resources to learners, parents, and teachers in the past year. As communities worldwide rethink their approach to education, Outschool will continue to innovate and provide kids with unique opportunities to explore their passions. Earlier this year, Techcrunch recognized Outschool as the newest EdTech unicorn. We've also been named Fast Company’s most innovative EdTech company in the world, and one of the top ten best startups for women from Elpha. THE ROLE -------- We are an effective team of fully remote engineers distributed across the US and Canada. Our philosophy is to start small and then intentionally iterate to test our assumptions and learn quickly (we call this Remixing Our Work, one of our cultural values). We're iteratively building up a complex product for a highly engaged audience, getting a lot done by staying focused on the work that matters. We work on AWS with ElasticSearch, Kafka, CDK, and Terraform. We have React, GraphQL, and Node/Express backed by PostgreSQL in our stack. We primarily use modern Javascript/Typescript, but also use Python and other languages where appropriate. We believe that the future of education is hybrid - online and in person. We are looking for an experienced Application Security Engineer who is excited about inspiring children to learn by building tools that allow children safe access to learning experiences. As an Application Security Engineer, you will work closely with Engineering teams, Product Managers and other stakeholders to ensure that Outschool is secure. This is a hands-on role and the ideal candidate will be a senior developer with advanced programming skills, preferably in modern JavaScript frameworks. Read more about our engineering team on our [blog](https://engineering.outschool.com/). You can learn about our [hiring process](https://engineering.outschool.com/posts/how-we-hire-engineers/), [career progression](https://engineering.outschool.com/posts/career-progression-framework/), [engineering challenges](https://engineering.outschool.com/posts/renaming-database-table/), and more! CORE RESPONSIBILITIES: * Application security reviews and threat modeling, including code review and testing * Application security vulnerability management * Develop processes to prevent security issues * Facilitate and support the preparation of security fixes, including writing code * Support the product and engineering teams in application security * Assist in creation and delivery of security training * Assist in development of automated security testing to validate that secure coding best practices are being used DESIRED EXPERIENCE & SKILLS: * 5+ years of experience as a software engineer * 3+ years of hands-on experience as an Application Security Engineer * Ability to read and write code in Node.js, React and/or Typescript * Familiarity with common security libraries, security controls, and common security flaws * Experience with OWASP, static/dynamic analysis, and common security tools * Experience identifying security issues through code review OTHER CONSIDERATIONS: * Background in working with software for children, finance, or healthcare * Experience with AWS infrastructure * Experience with GraphQL OUTSCHOOL CARES: * Shared Financial Success: Competitive salaries, stock options, and investment plans that make saving for retirement easier. * Health & Wellness: Comprehensive health, dental, vision, disability, and life insurance coverage options for employees and their families. Our medical benefits include fertility and family planning coverage. We also provide employees with online access to coaching and therapy sessions through our partner, ModernHealth. * PTO & Family Benefits: PTO and family leave enable our team to take the time that we need to recharge, relax, and spend time with family and friends. * Fully Distributed: With a team distributed across the US and Canada, we create a remote culture through expensable weekly meals, virtual events, expensable home office setup, and internet allowance. * Lifelong Learners: Annual budgets to self-direct our professional development as well as DEI learning. There’s also a budget for employees’ learners to take classes on Outschool! * Community Impact: Outschool matches employee donations to established charities and has committed to donating $3M to Outschool.org non-profit programs. Outschool is an equal opportunity employer. We view diversity as a moral imperative and competitive advantage. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We plan and structure our interviews to directly assess skills and experience. Outschool is committed to providing reasonable accommodations to neurodiverse individuals, applicants with physical and mental disabilities, and disabled veterans. For individuals who would like to request an accommodation, you may reach out to your Recruiting point of contact as you schedule your initial interview. Benefits packages are included for full-time employees only. **Full-time employees must be a citizen or legal residents of the U.S. or Canada and reside in U.S. or Canada.**