Chess.com · 5 hours ago

Security Engineer

United States

Full-time

Remote

Mid Level

3+ years exp

Maximize your interview chances

GamificationGaming

Growth Opportunities

Insider Connection @Chess.com

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Triage, reproduce, and assess vulnerabilities submitted through the Bug Bounty Program, and work with the Engineering Teams to close the discovered gaps.

Work closely with the Engineering Teams to perform Threat Models of their solutions, acting as a security advisor when appropriate, and ensuring designs are vetted and adhering to security industry standards.

Review Penetration Testing results and SIEM reports. Translate the findings into actionable tasks in Jira and track them to completion.

Apply updates to the WAF and various other security systems where applicable, and/or support the Engineering Teams to address findings.

Evaluate security software and systems used by the company. Attend product demos to help determine the best solution for our company. Lead these efforts from beginning to end.

Act as a security expert, guiding developers and projects to ensure security best practices.

Be a security advocate in Slack and Zoom meetings. Proactively joining slack conversations to represent Security and provide guidance. We rely heavily on Slack for communications, so you should be comfortable with that, and a very active contributor within the Slack workspace.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Web application securityBurp SuitePythonPHPJavaScriptBug Bounty programProgramming mindsetChess playerCollaboration skillsSense of ownershipLifelong learner