Senior Security Engineer, Application Security

Attentive® is the AI marketing platform for leading brands, designed to optimize message performance through 1:1 SMS and email interactions. Infusing intelligence at every stage of the consumer's purchasing journey, Attentive empowers businesses to achieve hyper-personalized communication with their customers on a large scale. Leveraging AI-powered tools, a mobile-first approach, two-way conversations, and enterprise-grade technology, Attentive drives billions in online revenue for brands around the globe. Trusted by over 8,000 leading brands such as CB2, Urban Outfitters, GUESS, Dickey’s Barbecue Pit, and Wyndham Resort, Attentive is the go-to solution for delivering powerful commerce experiences for consumers with the brands they love.

Attentive’s growth has been recognized by Deloitte’s Fast 500, Linkedin’s Top Startups and Forbes Cloud 100 all thanks to the hard work from our global employees!

Who we are We are looking for a versatile senior application security engineer who is passionate about securing emerging technology. Our ideal candidate is motivated by helping to reduce risk while enabling the business to move quickly and safely. You will bring both technical acumen and a developer mindset to your work. As a key member of the Security Engineering team, you will be responsible for securing the Attentive’s platform (we work in AWS) and customer-facing products (we build microservices primarily in Java). You will be the primary point of contact for our AI/ML teams, providing hands-on support to ensure they can develop and ship features at full speed without compromising on security. 

Approach At Attentive, we believe interacting with our security team and security controls should feel delightful and straightforward. Thus, the person in this role needs: -A creative and solution-oriented attitude. You’ll leverage this when finding solutions that work for all stakeholders. -The patience to fully understand our partner teams’ processes and goals. You’ll need this so you can implement thoughtful, complementary security solutions. -The ability to build automation into security processes. You’ll need this to reduce the security burden on our partner teams and support extremely rapid growth across the company.

Why Attentive needs you

• Lead with a focus on automation, security-by-design and scale
• Ensure Attentive’s AI offerings are trusted and safe for customers to use
• Perform secure design reviews and testing for new systems and product features
• Build and operate tools in partnership with other Security and Engineering teams to secure our code and underlying systems from development to delivery
• Provide hands-on support to engineers to deploy security solutions, harden services and remediate vulnerabilities
• Perform ongoing threat modeling to protect and secure our product and infrastructure
• Provides continuous security guidance to developers across engineering
• Take on additional responsibilities as necessary to uphold and enhance security across the organization

About you

• 5+ years of experience in Security with a focus in application security
• Comfortable coding and reviewing code with one of these languages: Java, Python, Golang
• Good understanding of modern web frameworks and remediating common vulnerabilities in code (i.e. Burp Suite, Semgrep)
• Experience automating and deploying application security tools in the CI/CD pipeline
• Strong interest in machine learning and security engineering: you should be comfortable discussing threats that apply to machine learning (e.g. training data leakage, prompt injection, multi-tenancy workloads, membership inference, etc.)
• Strong ability to work both independently and collaboratively across the organization to achieve outcomes
• Skilled at communicating complex technical ideas, risks and threats to non-technical audiences