Sr. Security Software Engineer

OpenGov
United States, Illinois, Chicago
Nov 09, 2024
OpenGov is home to an exceptional team - passionate about our mission to power more effective and accountable government. By bringing the OpenGov Cloud to our nation's state and local government, we're transforming communities so they can thrive! Imagine yourself being able to help small business owners open their doors faster, ensuring our tax dollars are accounted for, creating safer infrastructure, modernizing the permitting process, and assisting with disaster recovery. The work you do here every day has a meaningful impact on people's lives! OpenGov is a 2023 Top Workplaces USA award winner and a Forbes America's Best Startup Employer Join our smart, fun, and humble team to experience the most rewarding career of your life! Job Summary: As a Sr. Security Software Engineer at OpenGov, you will work closely with product and engineering teams to build secure systems for agile security. We are looking for someone that is passionate to enable engineering teams to address product and enterprise risk while maintaining business velocity and scaling for growth.This role requires someone that is self-motivated and disciplined to drive collaboration and impact through security strategy, threat modeling, developing tools for security-at-scale and execution. You'll be helping to build best-in-class SaaS solutions that enable efficiency, transparency, and accountability within government agencies. You'll be a key member of our Global Security team, leading complex projects in a fast-paced, agile environment driving towards a Secure-by-Default future. A typical day in this role would provide multiple opportunities to lead and design well scoped security services, implement and optimize complex security applications for speed and scalability, and resolve various unique technical challenges. The role provides you the ability to become subject matter expert in one or more security technical areas. Strong collaboration skills with the product, UX, and platform engineers, ability to navigate ambiguity and execute quickly will enable your success. Responsibilities: Independently design, implement and develop high-quality tools that are scalable, secure, and maintainable. Strong communication skills in writing and verbal to articulate security initiatives to any audience in the organization. Drive conversations with IC and Management leadership to influence business decisions based on risk. Advocate, build and foster for a Security Champions program across engineering. Lead a Secure-by-Default program through automation to prevent security issues at scale. Lead a data driven program to highlight the effectiveness of security initiatives. Automate secure cloud operations, and automate SAST, DAST, and SCA tooling in SecDevOps engineering pipelines. Proactively identify, research, and provide a risk based approach to automate vulnerability management. Troubleshoot, debug, and resolve complex technical issues. Drive continuous improvement of secure development processes, tools and operational excellence Mentor and guide junior security software engineers, fostering a culture of continuous learning and improvement. Stay current with emerging security and industry trends, advocating for their adoption where appropriate. Contribute to OpenGov's Engineering culture of innovation, leading-edge technology adoption and quality Requirements and Preferred Experience: BA/BS in a computer-science-related discipline or equivalent experience required 5+ years of professional experience in software engineering, or application security. Platform security experience in security platform control planes. Security architecture, secure code review, API security, threat modeling, zero-trust, and Secure-by-Default practices. Operating and network security systems experience. Troubleshoot complex encryption and network issues. Experience with identity and access management best practices such as TTL, JIT, and least-privilege access. Experience with Cyber Security, and reverse engineering malware. Experience in Java, Python, or C++ or C# or equivalent program language. Experience with GraphQL. Experience with AWS cloud security, container technology, and CI/CD systems. Experience with some SAST, DAST, or SCA tooling. Experience in building software using event-driven architecture is highly desirable Strong understanding of secure software development life cycle (SSDLC) methodologies On target ranges above include base plus a portion of variable compensation that is earned based on company and individual performance The final compensation will be determined by a number of factors such as qualifications, expertise, and the candidate's geographical location. What makes OpenGov unique Leadership: CEO Zac Bookman (MPA from Harvard and JD from Yale) is truly a mission-driven CEO. He was named one of the 100 most Intriguing Entrepreneurs by Goldman Sachs, a Tech Pioneer by the World Economic Forum, and SF and Silicon Valley Business Times' 40 under 40 class of 2018! Growth: Record breaking growth with 1,800+ governments (and counting) using our products. Click here to read more. Culture: Winner of 2023 Top Workplaces USA award, Awarded Top 25 Cloud Companies to Work For, Winner of Forbes 2022 Best Startup Employers, 50 Best Workplaces award. Check out our Careers Video! Perks: Comprehensive medical, dental, and vision coverage for you and your family. We almost forgot to mention: New parents get paid leave to welcome your new bundle of joy into your family. Plus, a wellness stipend for gym memberships/fitness classes for medical plan enrollees, employer HSA contribution, and lunch in-office every Wednesday. Product: Named to the GovTech 100 (seven consecutive years), we are the leader in cloud software for our nation's cities, counties, and state agencies. Mission Driven: We are a technology company with a passion for the mission. We're powering more effective and accountable government. Come join us and make a positive social impact! OpenGov is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.