3 months ago
Base Salary
$120k - $180k/yr
Responsibilities
- Own Boom’s application and cloud security posture across its infrastructure and full-stack product.
- Run the SOC 2 certification effort, including evidence collection, controls, auditor interaction, and preparation for CASA, FCRA, state-specific data regulations, and enterprise security reviews.
- Build the secure SDLC through threat modeling, security-sensitive code review, SAST/DAST/SCA tooling, secrets management, and dependency hygiene.
- Lead incident response and vulnerability management, including triage, containment, remediation, and blameless postmortems.
- Partner with engineering on identity, access, and handling of PII, credit, and payment data.
- Own customer security questionnaires and represent Boom in security discussions with enterprise property management partners.
Requirements
- At least 5 years of experience in security engineering or application security with hands-on web development experience.
- Demonstrated experience securing production web applications and cloud environments; AWS experience is strongly preferred.
- Working knowledge of SOC 2 and preferably ISO 27001, HIPAA, PCI, and GLBA/FCRA.
- Strong understanding of common attack classes including OWASP Top 10, authentication and session vulnerabilities, SSRF, deserialization, and supply-chain risks.
- Backend-leaning full-stack experience with Ruby, Grape, Sequel, React, Next.js, and TypeScript.
- Experience with third-party APIs, OAuth, webhooks, rate limits, idempotency, observability, on-call work, real incidents, and Terraform.
- Experience using AI coding agents autonomously, including daily Claude Code use.
- Strong communication, risk explanation, constructive challenge, self-direction, and empathy for financially vulnerable end users.
Benefits
- Full healthcare coverage including health, dental, and vision, with 50% dependent coverage.
- 15 days of paid time off, 3 sick days, and 11 US federal holidays annually.
- Company-issued laptop or MacBook.
- Company-sponsored training and development.
- Regular off-sites, retreats, company-sponsored events, and travel opportunities.
- The role is based in Austin, Texas.
- Stock options are offered.
Tech Stack
Categories
About Boom
Founded in 2020, Boom offers a suite of integrated rental financial services, including BoomReport, the industry's first end-to-end software solution for rent reporting. BoomReport helps renters build credit with their largest monthly expense and property owners/operators improve property performance.