Gusto
Principal Security Engineer - Application Security
Gusto, San Francisco, California, United States, 94199
Principal Security Engineer - Application Security
About Gusto Gusto is a modern, online people platform that helps small businesses take care of their teams. On top of full-service payroll, Gusto offers health insurance, 401(k)s, expert HR, and team management tools. Today, Gusto offices in Denver, San Francisco, and New York serve more than 300,000 businesses nationwide. Our mission is to create a world where work empowers a better life, and it starts right here at Gusto. That’s why we’re committed to building a collaborative and inclusive workplace, both physically and virtually. Learn more about our Total Rewards philosophy . About the role: The Security Engineering role works with product and engineering leads to design products and features with the safety and privacy of our customers in mind. Candidates for this role will be joining a team focused on building long-term relationships between the Security team and internal stakeholders across the company, providing guidance on security risks and mitigation, and secure development architecture. More about Security Partners on the Gusto blog. The Product Security group helps Gusto move faster, securely. We’re a team of engineers who work to enable other teams to build products as quickly as possible while continuing to protect our customers. We support developers in shipping secure code by building security tools and services, providing security training and expertise, and advocating for best practices in authentication, authorization, and safe data handling across the company. Here’s what you’ll do day-to-day: Work alongside product, engineering, infrastructure, legal, and privacy teams to design safe features to protect our customers. Review and threat model new systems, products, and features. Provide detailed security advice and risk assessments, including architectural direction. Develop guidelines and recommendations for secure coding practices. Lead and manage secure code training instruction. Implement and deploy application security tools. Develop long-term relationships with product development and engineering teams. Here’s what we're looking for: 12+ years of experience in information security, especially application security, product security, and/or security partnership. 5+ years of hands on software development experience Ability to work with engineers to balance security risks, customer privacy, and business requirements. Our cash compensation amount for this role is targeted at $225,000/yr to $245,000/yr in Denver & most remote locations, and $265,000/yr to $285,000/yr in New York & San Francisco Bay Area. Stock equity is additional. Final offer amounts are determined by multiple factors including candidate experience and expertise and may vary from the amounts listed above. Gusto has physical office spaces in Denver, San Francisco, and New York City. Employees who are based in those locations will be expected to work from the office on designated days approximately
2-3 days
per week (or more depending on role). The same office expectations apply to all Symmetry roles, Gusto's subsidiary, whose physical office is in Scottsdale. Note: The San Francisco office expectations encompass both the San Francisco and San Jose metro areas. When approved to work from a location other than a Gusto office, a secure, reliable, and consistent internet connection is required. Our customers come from all walks of life and so do we. We hire great people from a wide variety of backgrounds, not just because it's the right thing to do, but because it makes our company stronger. If you share our values and our enthusiasm for small businesses, you will find a home at Gusto. Gusto is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Gusto considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Gusto is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. We want to see our candidates perform to the best of their ability. If you require a medical or religious accommodation at any time throughout your candidate journey, please fill out this form and a member of our team will get in touch with you. Accepted file types: pdf, doc, docx, txt, rtf Enter manually Accepted file types: pdf, doc, docx, txt, rtf Preferred Name * Zip Code / Postal Code (Non-U.S. based candidates, please enter "00000") * LinkedIn Profile * How did you hear about this opportunity? (select all that apply) * LinkedIn Indeed Facebook News Article Conference or Meetup Company Blog Company Employee Company Website Are you legally authorized to work in the country where you are applying? * Select... Will you now or in the future require visa sponsorship for employment? * Select... If you’ll require this employer to commence, i.e., “sponsor,” an immigration or work permit case in order to employ you, either now or at some point in the future, then you should answer yes. An example of an immigration or work permit case that may require sponsorship now or in the future would be an H-1B or other employment-based work permit sponsorship. Do you have 12+ Years of Security Engineering Experience? * Select... Do you have 5+ years of Software Development Experience? * Select... Which programming languages you feel most proficient and confident working with? * Voluntary Self-Identification
Our customers come from all walks of life and so do we. We hire people from a wide variety of backgrounds, not just because it’s the right thing to do, but because it helps us to build better products, better serve our customers, and makes our company stronger. In addition to the information required to consider your application, below is a set of demographic questions that help us identify areas for improvement in our process and further support the development and execution of our diversity efforts and programs as well as to create a more inclusive environment for all employees. Your responses to these questions will be recorded and maintained in a confidential file. Your responses, or your wish not to answer, will not be associated with your specific application, will not be shared with hiring managers, and will not in any way be used in making any employment decisions, including hiring decisions. Please use this as a reference while completing the disability self-identification: You are considered to have a disability if you have a physical or mental impairment or medical condition that substantially limits a major life activity, or if you have a history or record of such an impairment or medical condition. Disabilities include, but are not limited to: Blindness Deafness Cancer Diabetes Epilepsy Autism Cerebral palsy HIV/AIDS Bipolar disorder Multiple sclerosis (MS) Missing limbs or partially missing limbs Post-traumatic stress disorder (PTSD) Impairments requiring the use of a wheelchair How would you describe your gender identity (please select one)? * Select... I identify as transgender (please select one): * Select... I identify my sexual orientation as (please select one): * Select... I identify my race/ethnicity as (mark all that apply): * Select... Veteran Status (please select one): * Select... I have a disability (please select one): * Select... I identify as a first-generation professional (please select one): * Select...
#J-18808-Ljbffr
About Gusto Gusto is a modern, online people platform that helps small businesses take care of their teams. On top of full-service payroll, Gusto offers health insurance, 401(k)s, expert HR, and team management tools. Today, Gusto offices in Denver, San Francisco, and New York serve more than 300,000 businesses nationwide. Our mission is to create a world where work empowers a better life, and it starts right here at Gusto. That’s why we’re committed to building a collaborative and inclusive workplace, both physically and virtually. Learn more about our Total Rewards philosophy . About the role: The Security Engineering role works with product and engineering leads to design products and features with the safety and privacy of our customers in mind. Candidates for this role will be joining a team focused on building long-term relationships between the Security team and internal stakeholders across the company, providing guidance on security risks and mitigation, and secure development architecture. More about Security Partners on the Gusto blog. The Product Security group helps Gusto move faster, securely. We’re a team of engineers who work to enable other teams to build products as quickly as possible while continuing to protect our customers. We support developers in shipping secure code by building security tools and services, providing security training and expertise, and advocating for best practices in authentication, authorization, and safe data handling across the company. Here’s what you’ll do day-to-day: Work alongside product, engineering, infrastructure, legal, and privacy teams to design safe features to protect our customers. Review and threat model new systems, products, and features. Provide detailed security advice and risk assessments, including architectural direction. Develop guidelines and recommendations for secure coding practices. Lead and manage secure code training instruction. Implement and deploy application security tools. Develop long-term relationships with product development and engineering teams. Here’s what we're looking for: 12+ years of experience in information security, especially application security, product security, and/or security partnership. 5+ years of hands on software development experience Ability to work with engineers to balance security risks, customer privacy, and business requirements. Our cash compensation amount for this role is targeted at $225,000/yr to $245,000/yr in Denver & most remote locations, and $265,000/yr to $285,000/yr in New York & San Francisco Bay Area. Stock equity is additional. Final offer amounts are determined by multiple factors including candidate experience and expertise and may vary from the amounts listed above. Gusto has physical office spaces in Denver, San Francisco, and New York City. Employees who are based in those locations will be expected to work from the office on designated days approximately
2-3 days
per week (or more depending on role). The same office expectations apply to all Symmetry roles, Gusto's subsidiary, whose physical office is in Scottsdale. Note: The San Francisco office expectations encompass both the San Francisco and San Jose metro areas. When approved to work from a location other than a Gusto office, a secure, reliable, and consistent internet connection is required. Our customers come from all walks of life and so do we. We hire great people from a wide variety of backgrounds, not just because it's the right thing to do, but because it makes our company stronger. If you share our values and our enthusiasm for small businesses, you will find a home at Gusto. Gusto is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Gusto considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Gusto is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. We want to see our candidates perform to the best of their ability. If you require a medical or religious accommodation at any time throughout your candidate journey, please fill out this form and a member of our team will get in touch with you. Accepted file types: pdf, doc, docx, txt, rtf Enter manually Accepted file types: pdf, doc, docx, txt, rtf Preferred Name * Zip Code / Postal Code (Non-U.S. based candidates, please enter "00000") * LinkedIn Profile * How did you hear about this opportunity? (select all that apply) * LinkedIn Indeed Facebook News Article Conference or Meetup Company Blog Company Employee Company Website Are you legally authorized to work in the country where you are applying? * Select... Will you now or in the future require visa sponsorship for employment? * Select... If you’ll require this employer to commence, i.e., “sponsor,” an immigration or work permit case in order to employ you, either now or at some point in the future, then you should answer yes. An example of an immigration or work permit case that may require sponsorship now or in the future would be an H-1B or other employment-based work permit sponsorship. Do you have 12+ Years of Security Engineering Experience? * Select... Do you have 5+ years of Software Development Experience? * Select... Which programming languages you feel most proficient and confident working with? * Voluntary Self-Identification
Our customers come from all walks of life and so do we. We hire people from a wide variety of backgrounds, not just because it’s the right thing to do, but because it helps us to build better products, better serve our customers, and makes our company stronger. In addition to the information required to consider your application, below is a set of demographic questions that help us identify areas for improvement in our process and further support the development and execution of our diversity efforts and programs as well as to create a more inclusive environment for all employees. Your responses to these questions will be recorded and maintained in a confidential file. Your responses, or your wish not to answer, will not be associated with your specific application, will not be shared with hiring managers, and will not in any way be used in making any employment decisions, including hiring decisions. Please use this as a reference while completing the disability self-identification: You are considered to have a disability if you have a physical or mental impairment or medical condition that substantially limits a major life activity, or if you have a history or record of such an impairment or medical condition. Disabilities include, but are not limited to: Blindness Deafness Cancer Diabetes Epilepsy Autism Cerebral palsy HIV/AIDS Bipolar disorder Multiple sclerosis (MS) Missing limbs or partially missing limbs Post-traumatic stress disorder (PTSD) Impairments requiring the use of a wheelchair How would you describe your gender identity (please select one)? * Select... I identify as transgender (please select one): * Select... I identify my sexual orientation as (please select one): * Select... I identify my race/ethnicity as (mark all that apply): * Select... Veteran Status (please select one): * Select... I have a disability (please select one): * Select... I identify as a first-generation professional (please select one): * Select...
#J-18808-Ljbffr