1 day ago
Responsibilities
- Build and implement security measures to prevent software vulnerabilities and mitigate malicious-intent and source-code risks.
- Design, develop, and deploy account takeover risk identification and flagging solutions for internet-facing business flows.
- Develop security Bill of Materials solutions to identify vulnerable libraries and maintain component security and compliance.
- Reduce attack surfaces through patching and upgrading product security solutions and open-source libraries.
- Develop phishing, malware, and malicious-text filters and detection systems.
- Build and support tools for rapid product security risk analysis.
- Collaborate with teams to enforce security best practices.
- Monitor and report threats and respond to incidents involving high-risk ecommerce transactions.
- Apply artificial intelligence methods to optimize assigned security solutions.
Requirements
- Master’s degree or foreign equivalent in Computer Science, Engineering, or a closely related field plus three years of experience in the offered job or a related occupation.
- Alternatively, bachelor’s degree or foreign equivalent in Computer Science, Engineering, or a closely related field plus five years of experience in the offered job or a related occupation.
- At least three years of Java-based server-side development experience.
- At least two years of Node.js experience for front-end user-experience development with security controls.
- At least two years of experience developing scalable REST and GraphQL APIs.
- At least one year of experience delivering secure solutions in environments using static and dynamic scanner tools.
- At least one year of experience with centralized open-source libraries using Artifactory.
- At least two years of experience maintaining and supporting open-source library patching.
- At least one year of experience developing and deploying applications in Kubernetes and Docker containers.
- At least two years of experience developing runtime dashboards with Kibana and Elasticsearch.
- At least two years of experience handling large datasets in NoSQL systems.
- Must be legally authorized to work in the United States without sponsorship.
Benefits
- Partial telecommuting is permitted from within a commutable distance of Austin, Texas.
- The total compensation package may include a target bonus and restricted stock units, as applicable.
- Benefits may include medical, financial, and other plans, including 401(k) eligibility.
- Paid time off may include PTO and parental leave.
- The role is an at-will position.
About TCGplayer
TCGplayer operates an online marketplace and software tools for buying and selling trading card games and related collectibles, serving hobby shops and individual sellers. It generates revenue through marketplace fees, seller subscriptions, and fulfillment programs such as TCGplayer Direct. An eBay subsidiary, the company provides authentication and logistics services that help stores list inventory at scale and reach buyers across the U.S. and internationally.