1 month ago
Remote, WorldwideSenior / Staff+
Responsibilities
- Use automated scanners and internal risk processes to identify application and system vulnerabilities.
- Patch vulnerabilities directly in code, refactor legacy components, and update outdated libraries and dependencies.
- Partner with engineering teams to troubleshoot security issues and complete defect remediation.
- Create security playbooks, coding standards, remediation documentation, and internal security knowledge resources.
- Integrate automated security scanning and guardrails into the software development lifecycle.
- Implement and maintain cloud infrastructure protections, including firewalls, intrusion detection, encryption, and secure asset partitioning.
- Build and operate automated incident-response logic to detect, flag, and contain system anomalies.
Requirements
- 5–8+ years of experience in an Application Security or Security Engineering role.
- Hands-on ability to read code, identify architectural flaws, and implement code-level fixes or remediation scripts.
- Experience managing technical debt and legacy code paths and safely updating third-party libraries and dependencies.
- Strong written communication skills and experience creating security playbooks and documentation.
- Experience collaborating with developers to debug issues and deliver security fixes.
- Familiarity with cloud-native architectures, containerized applications, CI/CD integrations, and automated security testing systems such as SAST, DAST, and SCA.
- A proactive engineering mindset focused on implementing lasting code and infrastructure safeguards.
- Application security fundamentals, specifically OWASP, are required or preferred.
- Experience with network configuration and application deployment is preferred.
Benefits
- People-first employer with a mission focused on education and digital classroom technology.
- High-caliber, diverse team including startup, Fortune 500, and big-tech professionals.
- Continuous learning and development opportunities, including subsidized course fees, certifications, conferences, and access to Udemy.
- Opportunity to support schools, students, and teachers through a global education platform used by more than 70 million users in 175 countries.
Categories
About Kami
Kami builds a web-based classroom and document-annotation platform for K–12 schools, delivered as an app and Chrome extension that integrates with Google Classroom, Drive, and Chromebooks. It sells subscription licenses to districts, schools, and teachers to create interactive assignments, mark up PDFs, and streamline feedback and workflows. Founded in 2013 and headquartered in Boston, Massachusetts, Kami is privately held and serves educators and students globally.