Security Engineer
Loom (View all Jobs)
United States
Interview Process
1. Google Hangouts resume dive on past experience 2. Take-home project OR architectural phone screen 3. On-site interviews (2 technical architecture related to work, 1 or 2 non-technical)
Loom is the video communication platform for async work that helps companies communicate better at scale. Loom makes it easy to record quick videos of your screen and camera and instantly share them with a link. More than 20M users across 350k+ companies around the world trust Loom to share feedback, updates, intros, training, and more – every day. Founded in late 2015, Loom has raised $203M from world-class investors including Andreessen Horowitz, Sequoia, Kleiner Perkins, Iconic, and Coatue.
The Role
As a member of the security team at Loom, you will be responsible for leading and implementing the various initiatives that relate to improving Loom's security. We will achieve that by working and collaborating with cross-functional teams to provide guidance on security best practices and help with security automation to scale security for engineering initiatives. The Security Team is focused on enabling our engineering teams to build and ship secure products. This is done by designing, building, and deploying state of the art security alongside our product and infrastructure teams.
We're looking for experienced Engineers to join our fast moving Security Team. As part of the security team you will get to work on some interesting problems around SAST, DAST, SCA and building automations to assists Kubernetes and AWS security.
Responsibilities
- Perform application design and code reviews with product teams.
- Build, deploy and maintain security tooling.
- Improve existing threat hunting and security detection across our platform.
- Drive our bug bounty program with HackerOne.
- Be an incident commander for security incidents to triage, remediate P0 security issues. Identify proactive defense strategies.
- Work with stakeholders across the organization, provide security training and outreach to our internal development teams to achieve a consistently high security bar
- Experience with GDPR, CCPA and SOC2 compliance
- Experience with SIEM platforms and the ability to extend their functionality
What We're Looking For
- 3+ years of relevant security experience in security consulting or in product/infrastructure security demonstrating strong application security fundamentals.
- Solid understanding of application security concepts and best practices.
- Ability to work well cross-functionally, and communicate with audiences who may not have a security background.
- Willingness to learn new technologies or languages.
- Experience with security reviews and threat modeling.
- Ability to work with a high degree of autonomy.
Perks at Loom
- Competitive compensation and equity package
- Comprehensive medical, dental, and vision coverage for employees and dependents (for US employees)
- 14 paid company holidays plus Summer Break in July and Winter Break in December
- Flexible Spending Account (FSA) and Dependent Care Flexible Spending Account (DCFSA)
- Healthcare reimbursement (for International employees)
- Life, AD&D, Short and Long Term Disability Insurance
- 401(k) with 4% company matching
- Wellness stipends
- Flexible PTO
- Paid parental leave
- Remote work opportunities
- Professional development reimbursement
- Home office & technology reimbursement
How We Work
Loom = Equal Opportunity Employer
Please mention No Whiteboard if you apply!
I'm a one-man team looking to improve tech interviews, and could use any support! 😄