200+ applicants

This job has closed.

Company

Original Job Post

Dave · 1 week ago

Security Engineer II

United States

Full-time

Remote

Entry, Mid Level

$112K/yr - $178K/yr

2+ years exp

Wonder how qualified you are to the job?

BankingFinancial Services

H1B Sponsorship

Comp. & Benefits

Insider Connection @Dave

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Assist in the development and implementation of security controls for products, including mobile and web applications.

Contribute to fixing common security vulnerabilities within applications.

Build tools and processes for automating security controls and monitoring at scale.

Support the integration of security tools into CI/CD pipelines for automated security checks.

Handle security incidents, including evidence collection, analysis, and reporting.

Assist in developing and maintaining internal incident response guidelines.

Prepare and present security reports and findings to stakeholders.

Participate in an on-call rotation to address critical security incidents.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

PythonTypeScriptJavaScriptIASTSASTSIEMLog analysisThreat huntingGitGitHubGoogle Cloud PlatformOWASPPCI-DSSSOXCommunicationAnalyticalProblem-solvingCollaborationPenetration TestingIncident ResponseBug Bounty ProgramsInfrastructure as CodeTerraformThreat ModelingSecurity Architecture ReviewSecure Coding PracticesMobile Application VulnerabilitiesSecure Mobile Development PracticesCEHOSCP

Required

Bachelor's degree in a field that requires logical and creative thinking; STEM majors preferred.

2+ years of experience as a security engineer, with proficiency in reading and writing code, particularly in Python, TypeScript, JavaScript, or similar languages, to effectively build.

Familiarity with application security testing tools (e.g., IAST, SAST).

Knowledge of security monitoring tools and techniques (e.g., SIEM, log analysis, threat hunting).

Strong communication, analytical, and problem-solving skills, with the ability to collaborate effectively within a team.

Familiarity with Git, GitHub, and public cloud infrastructure, preferably Google Cloud Platform.

Knowledge of security best practices, standards, and compliance requirements (e.g., OWASP, PCI-DSS, SOX).

Preferred

Hands-on experience in penetration testing, incident response, and bug bounty programs.

Experience with Google Cloud Platform (GCP) and Infrastructure as Code (IaC) tools such as Terraform.

Experience in threat modeling, security architecture review, and secure coding practices.

Familiarity with common mobile application vulnerabilities and secure mobile development practices.

Relevant industry certifications such as CEH, OSCP, GIAC, or vendor-specific certifications.

Company

Dave

Glassdoor

4.0

Dave is a neobank and fintech company that helps people avoid overdraft fees and improve their financial well-being.

Founded in 2016

Los Angeles, California, USA

201-500 employees

http://www.Dave.com

H1B Sponsorship

Dave has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Trends of Total Sponsorships

2023 (1)

2022 (18)

2021 (11)

2020 (12)