Software Engineer III Application Security
Software Engineer III Application Security
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
Candidates for this position are preferred to be based in Bangalore India and will be expected to comply with their teams hybrid work schedule requirements.
Who We Are:
Wayfair runs the largest custom ecommerce large parcel network in the United States approximately 1.6 million square meters of logistics space. The nature of the network is inherently a highly variable ecosystem that requires flexible reliable and resilient systems to operate efficiently.
Wayfairs Application Security Team is responsible for safeguarding the security of development and custom products and features. We engage with hundreds of developers and development teams to review and improve the security of custom developed applications products and interfaces. Additionally we monitor and manage customer security and react to incidents as they arise. We design secure solutions and systems build trusted relationships with teams across Wayfair and our customers investigate security incidents discover and mitigate vulnerabilities both internal and external.
What Youll Do
- Lead enterprise wide security initiatives by working closely with development teams
- Strategize and collaborate with security development to build security solutions that can be used across the enterprise using Python and Java
- Be the trusted security SME for the Org and liaise with development and product teams to develop & deploy secure products and features for customers suppliers partners and employees
- Implement Sec in DevSecOps model of operations
- Conduct risk analysis threat modeling and penetration testing of highly complex services to build secure products from ground up
- Keep development teams uptodate with secure coding practices by providing them training and the latest trends in secure development
- Build runbooks and knowledge base to assist developers with secure development
- Coordinate with and manage external hackers as part of Wayfairs Bug Bounty Program
- Maintain tune and own the web application firewall (WAF)
What Youll Need
- Minimum of 6 years of experience in secure application development or application security
- Experience with secure application development or Secure SDLC
- Handson scripting experience in Python
- Experience securing k8s REST and GraphQL services with deep understanding of securing micro service architectures
- Experience securing any of these cloud services platforms GCP (Preferred) AWS Azure
- Understanding of Authentication mechanisms such as SAML JWT OAuth etc.
- Understanding of build and release management CI/CD platforms
- Experience securing any of these cloud services platforms GCP AWS Azure
- Understanding of Authentication mechanisms such as SAML JWT OAuth etc.
- Cloud Security Certifications is a plus
- We would love to see experience with WAF Bug Bounty Program and Open source security tools
About Wayfair Inc.
Wayfair is one of the worlds largest online destinations for the home. Whether you work in our global headquarters in Boston or in our warehouses or offices throughout the world were reinventing the way people shop for their homes. Through our commitment to industryleading technology and creative problemsolving we are confident that Wayfair will be home to the most rewarding work of your career. If youre looking for rapid growth constant learning and dynamic challenges then youll find that amazing career opportunities are knocking.
No matter who you are Wayfair is a place you can call home. Were a community of innovators risktakers and trailblazers who celebrate our differences and know that our unique perspectives make us stronger smarter and wellpositioned for success. We value and rely on the collective voices of our employees customers community and suppliers to help guide us as we build a better Wayfair and world for all. Every voice every perspective matters. Thats why were proud to be an equal opportunity employer. We do not discriminate on the basis of race color ethnicity ancestry religion sex national origin sexual orientation age citizenship status marital status disability gender identity gender expression veteran status genetic information or any other legally protected characteristic.
Your personal data is processed in accordance with our Candidate Privacy Notice If you have any questions or wish to exercise your rights under applicable privacy and data protection laws please contact us at.
Employment Type
Full Time
