Lead Application Security Engineer at Zipline
South San Francisco, CA 94080
About the Job
ABOUT ZIPLINEZipline is at the forefront of a logistics revolution: We design, manufacture, and operate our own fleet of autonomous drones, and all ground-based equipment that supports flight, to deliver critical and lifesaving medicine to thousands of hospitals serving millions of people on multiple continents
Our mission is to provide every human on Earth with instant access to vital medical supplies
Do you want to change the world? Join Zipline and help us make this a reality for billions of people.ABOUT YOU AND THE ROLEZipline builds and operates fleets of delivery drones to get medicine to those who need it, fast, regardless of where they live
To power this, the software team is building out the long term scalable solutions to expand rapidly while empowering our world class distribution centers to serve their customers as fast as possible.In this role, you will be responsible for partnering with Zipline’s software teams to own and maintain the security of our cloud environments
You will directly partner with our engineering teams to help discover vulnerabilities in process, architecture, and the software we build
The Application Security team will be responsible for helping define data classifications and ensuring the proper access control measures are in place for the compliance requirements of that data. As the lead of Zipline’s growing AppSec team - you will be responsible for prioritizing the work of the team members, helping craft security policy for our development teams, defining/following incident response plans for potential breaches, and foundational responsible for incrementally improving the security of Zipline’s systems. Our ideal candidate works well in startup environments, is comfortable wearing many hats, and can motivate a team to produce impressive results while collaborating with partner teams.WHAT YOU'LL DOLead the team responsible for securing Zipline’s software and cloud infrastructure Partner with engineering teams to build functional and pragmatic security policy Work with the rest of the AppSec team to build tools and frameworks for the engineering teamBuild out and improve the security incident response frameworksSupport the growth and development of the members of the Application Security teamDeeply understand and secure the services running in Zipline’s cloud infrastructureHelp manage and maintain Zipline’s compliance with well established security standards (SOC2, ISO 27001, …)Support third party pen tests WHAT YOU'LL BRINGExperience as an engineering manager or tech lead of a Security or Software teamExperience working with complex distributed software systems that support production loadsStrong fundamentals in microservice design principlesExpertise in Python, C++, Golang, or another object oriented languagesA Strong Generalist Engineering mindset, ready to dive in and contribute to improve Zipline’s security - across many systemsExcited to be a technical lead and mentor othersA pragmatic approach to security - and experience incrementally improving systemsNice to haves: Industry experience supporting multi-domain engineering teams (WebApp, Cloud Infra, Embedded Systems)Experience being a security evangelist in an industry context, helping socialize best practices (not just enforcing policy)Experience as a software engineer, and a deep understanding of healthy SDLC practicesWHAT ELSE YOU NEED TO KNOW The starting cash range for this role is $170,000 - 210,000
Please note that this is a target, starting cash range for a candidate who meets the minimum qualifications for this role
The final cash pay for this role will depend on a variety of factors, including a specific candidate's experience, qualifications, skills, working location, and projected impact
The total compensation package for this role may also include: equity compensation; discretionary annual or performance bonuses; sales incentives; benefits such as medical, dental and vision insurance; paid time off; and more.Zipline is an equal opportunity employer and prohibits discrimination and harassment of any type without regard to race, color, ancestry, national origin, religion or religious creed, mental or physical disability, medical condition, genetic information, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity, gender expression, age, marital status, military or veteran status, citizenship, or other characteristics protected by state, federal or local law or our other policies.We value diversity at Zipline and welcome applications from those who are traditionally underrepresented in tech
If you like the sound of this position but are not sure if you are the perfect fit, please apply!
Our mission is to provide every human on Earth with instant access to vital medical supplies
Do you want to change the world? Join Zipline and help us make this a reality for billions of people.ABOUT YOU AND THE ROLEZipline builds and operates fleets of delivery drones to get medicine to those who need it, fast, regardless of where they live
To power this, the software team is building out the long term scalable solutions to expand rapidly while empowering our world class distribution centers to serve their customers as fast as possible.In this role, you will be responsible for partnering with Zipline’s software teams to own and maintain the security of our cloud environments
You will directly partner with our engineering teams to help discover vulnerabilities in process, architecture, and the software we build
The Application Security team will be responsible for helping define data classifications and ensuring the proper access control measures are in place for the compliance requirements of that data. As the lead of Zipline’s growing AppSec team - you will be responsible for prioritizing the work of the team members, helping craft security policy for our development teams, defining/following incident response plans for potential breaches, and foundational responsible for incrementally improving the security of Zipline’s systems. Our ideal candidate works well in startup environments, is comfortable wearing many hats, and can motivate a team to produce impressive results while collaborating with partner teams.WHAT YOU'LL DOLead the team responsible for securing Zipline’s software and cloud infrastructure Partner with engineering teams to build functional and pragmatic security policy Work with the rest of the AppSec team to build tools and frameworks for the engineering teamBuild out and improve the security incident response frameworksSupport the growth and development of the members of the Application Security teamDeeply understand and secure the services running in Zipline’s cloud infrastructureHelp manage and maintain Zipline’s compliance with well established security standards (SOC2, ISO 27001, …)Support third party pen tests WHAT YOU'LL BRINGExperience as an engineering manager or tech lead of a Security or Software teamExperience working with complex distributed software systems that support production loadsStrong fundamentals in microservice design principlesExpertise in Python, C++, Golang, or another object oriented languagesA Strong Generalist Engineering mindset, ready to dive in and contribute to improve Zipline’s security - across many systemsExcited to be a technical lead and mentor othersA pragmatic approach to security - and experience incrementally improving systemsNice to haves: Industry experience supporting multi-domain engineering teams (WebApp, Cloud Infra, Embedded Systems)Experience being a security evangelist in an industry context, helping socialize best practices (not just enforcing policy)Experience as a software engineer, and a deep understanding of healthy SDLC practicesWHAT ELSE YOU NEED TO KNOW The starting cash range for this role is $170,000 - 210,000
Please note that this is a target, starting cash range for a candidate who meets the minimum qualifications for this role
The final cash pay for this role will depend on a variety of factors, including a specific candidate's experience, qualifications, skills, working location, and projected impact
The total compensation package for this role may also include: equity compensation; discretionary annual or performance bonuses; sales incentives; benefits such as medical, dental and vision insurance; paid time off; and more.Zipline is an equal opportunity employer and prohibits discrimination and harassment of any type without regard to race, color, ancestry, national origin, religion or religious creed, mental or physical disability, medical condition, genetic information, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity, gender expression, age, marital status, military or veteran status, citizenship, or other characteristics protected by state, federal or local law or our other policies.We value diversity at Zipline and welcome applications from those who are traditionally underrepresented in tech
If you like the sound of this position but are not sure if you are the perfect fit, please apply!
