3 months ago
Remote, United StatesMid Level / Senior
H1B sponsor
Base Salary
$175k - $215k/yr
Responsibilities
- Partner with Product and Engineering teams to integrate security into application design and development.
- Lead threat modeling exercises and identify practical security solutions for complex systems.
- Conduct secure code reviews, application security assessments, and vulnerability analysis.
- Develop and implement automated security guardrails across the software development lifecycle.
- Investigate, prioritize, and drive remediation of application security findings.
- Promote secure coding through training, coaching, and awareness initiatives.
- Collaborate with Security, Privacy, and Business Assurance teams on compliance and risk management.
- Create and maintain scalable security standards, procedures, and best practices.
Requirements
- Associate degree or equivalent experience is required; a bachelor’s degree is preferred.
- Four to six-plus years of software engineering experience, including at least two years focused on application security.
- Experience partnering directly with software development teams to improve application security.
- Knowledge of secure-by-design principles and modern application security practices.
- Familiarity with OWASP Top 10, ASVS, MASVS, and common application security frameworks.
- Experience with threat modeling methodologies such as STRIDE, PASTA, or similar approaches.
- Working knowledge of cloud platforms and modern application architectures.
- Proficiency in at least one programming language and its security ecosystem.
- Security certifications such as CSSLP, GWEB, OSWE, or similar are preferred.
- Experience in insurance, financial services, healthcare, or other regulated industries is preferred.
- Advanced cloud security and application security architecture knowledge is preferred.
- Experience with mobile application security, QA testing, penetration testing, security automation, AI technologies, LLM security, or prompt engineering is preferred.
Benefits
- Medical, dental, vision, life insurance, and supplemental income plans for employees and dependents.
- Headspace app subscription, monthly wellness allowance, and a 401(k) plan with company match.
- Remote-first work from anywhere in the U.S. excluding U.S. territories, with occasional travel not required for most positions.
- One-time $2,000 payment for in-home office equipment and furniture, plus a fully provisioned MacBook Pro.
- Four weeks of PTO accrued in the first year and twelve weeks of fully paid parental leave for new parents.
- Up to $5,000 annually for professional learning, continuing education, and career development, plus LinkedIn Learning and BetterUp access.
- Core meeting hours are 9 AM–2 PM Pacific time; Bay Area and Providence employees may use local offices as desired.
Categories
About Quanata
Quanata builds insurance technology that uses telematics, behavioral data, and AI to predict and prevent risk and to power context-based insurance products. It develops and supports a flexible, full-stack digital insurance platform and risk-focused acquisition capabilities for State Farm and HiRoad. Headquartered in San Francisco, Quanata is privately held and wholly owned and funded by State Farm.