Secure Applications Engineer

Crunchyroll is a leading global destination and platform for Japanese anime and Asian content. Through applications including Crunchyroll for iPhone, iPad, Android, Playstation®3, Playstation®4, Xbox LIVE®, AppleTV, Roku, Internet-enabled TVs, set-top boxes, affiliate websites and its own streaming website.

We are looking for highly motivated and talented technical individuals to join our team as a Senior Secure Applications Engineer. The ideal candidate has a strong technical background, has worked in software development, has experience owning development of application components, and is capable of assisting in defining the implementation details for projects within his or her realm. This individual will be working with secure services, so an interest in application security is a must.

• Work independently or collaboratively with other software engineers on developing application components
• Recommend changes in implementation based on domain knowledge
• Contribute considerations from domain knowledge in technical project planning
• Own component documentation so to instruct future developers and others in the company on how your component works
• Demonstrate functionality to product managers and other potential stakeholders
• Implement automated whitebox tests that validate code
• Review the work of other developers in the team
• Uphold secure development practices in your work and that of others to catch potential vulnerabilities before they become threats
• Annually review top software application vulnerabilities and their prevention
• Periodically investigate user-submitted exploits as a part of our bug bounty program

Requirements:

• Bachelors in Computer Science or Engineering
• 2+ years as a software development engineer
• Experience in LAMP environment
• 1+ years of experience with secure development practices
• Experience with scrum process
• Experience with issue tracking software
• Sensitivity toward handling and exposure of sensitive data

Pluses:

• You have worked with PCI-compliant systems
• You have experience working with microservice architecture
• You know the OWASP Top 10
• You have CISSP certification or a related security certification
• You have experience in technical training or have given presentations on technical topics professionally
• You have developed projects in Golang