Application Security Engineer at Fireblocks

Tel-Aviv, Tel-Aviv District, Israel -

Full Time

Start Date

Immediate

Expiry Date

07 Jun, 26

Salary

0.0

Posted On

09 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Design Reviews, Threat Modeling, Security Testing, Code Reviews, Security Libraries, Vulnerability Remediation, SSDLC, Bug Bounty Analysis, Automation, JavaScript, Typescript, C/C++, Python, Web Security, Mobile App Security

Industry

Software Development

Description

The world of digital assets is accelerating in speed, magnitude, and complexity, opening the door to new ways for leveraging the blockchain. Fireblocks’ platform and network provide the simplest and most secure way for companies to work with digital assets and it trusted by some of the largest financial institutions, banks, globally-recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more. Responsibilities Support product teams as they develop new features by conducting design reviews, threat modeling, security testing, and code reviews. Contribute code to enhance security across our applications, whether by developing security-centric libraries, standardizing security practices, or rectifying security vulnerabilities in Fireblocks client and backend applications. Lead automation efforts to proactively identify security weaknesses, and develop security controls to prevent future occurrences of similar vulnerabilities. Assess potential security vulnerabilities within our applications, and work with development teams to ensure SLA-driven remediation processes. Identify gaps in Fireblocks’ secure software development life cycle (SSDLC), and lead the efforts to address them including implementation end-to-end. Determine the root cause and severity of vulnerabilities reported through our bug bounty platform and work with developers to devise and implement robust solutions. Participate and contribute to team meetings, roadmap planning, and discussions. Validate that security patches address reported vulnerabilities and test for any potential bypasses. Document identified vulnerabilities in a way that allows our engineering team to take quick action, providing them with the fixed code. Proactively prevent future occurrences of a vulnerability through developing automation, security controls, and educating developers. Requirements 5+ years of work experience in the application security domain. Experience performing security design reviews, threat modeling, or security testing. Enthusiasm for writing code, and helping others do the same. Solid written and verbal communication skills. Experience in programming with JavaScript & Typescript, C/C++, Python. Proactiveness and self-driven to be successful working in a remote environment. Relevant knowledge of modern web and mobile app security landscape, real-world attacks, and mitigations. Bonus points: Familiarity with blockchain and Decentralized Applications. Past experience educating or mentoring. Experience working on a development team. Fireblocks' mission is to enable every business to easily and securely access digital assets and cryptocurrencies. In order to do that, we strongly believe our workforce should be as diverse as our clients, and this is why we embrace diversity and inclusion in all its forms. Please see our candidate privacy policy here.

Responsibilities

The engineer will support product teams by conducting design reviews, threat modeling, security testing, and code reviews, while also contributing code to enhance application security and leading automation efforts to proactively identify weaknesses. Responsibilities also include assessing vulnerabilities, ensuring SLA-driven remediation, identifying and addressing gaps in the secure software development life cycle (SSDLC), and validating security patches.