3 days ago
Base Salary
$201k - $256k/yr
Responsibilities
- Mentor other Security Engineers and provide guidance on senior-level security responsibilities.
- Support engineering and product teams in reproducing, triaging, and remediating application security vulnerabilities.
- Lead application security reviews, threat modeling, code review, dynamic testing, and automated security testing.
- Drive improvements to the bug bounty program and initiatives that address vulnerabilities across functional areas.
- Lead security training for development teams and influence cross-functional security changes.
- Manage vulnerabilities through remediation or risk acceptance within targeted service-level agreements.
- Maintain security scope inventories, metrics, collateral, processes, and security controls.
- Design and execute quarterly objectives and key results (OKRs).
Requirements
- 8+ years of information security experience focused on application security, including threat modeling, developer training, vulnerability management, automated security testing, and code reviews.
- Expert understanding of common security flaws, remediation practices, and the OWASP Top 10.
- Expert understanding of network and web protocols including TCP/IP, UDP, HTTP, and HTTPS.
- Some development or scripting experience in Python or JavaScript.
- Experience working directly with software developers to improve code security.
- Expert practical understanding of security libraries, security controls, and common security flaws.
- Experience with vulnerability scanners, SAST/DAST, DevOps software, and AWS cloud security tooling.
- Strong knowledge of NIST 800-218 SSDF, OWASP, SAFECode, CIS benchmarks, ISO 27001, SOC 2, GDPR, PCI, SOX, and NIST 800-53.
- Excellent written, verbal, and presentation communication skills, with the ability to explain complex topics clearly.
- Bachelor's degree in a related field is preferred.
- Relevant certifications such as AWS, CNCF, and GIAC are highly desirable.
Benefits
- Remote work is indicated by the #Li-remote designation, with equipment and support provided for working from home or an office.
- Health coverage, life insurance, disability insurance, and a 401(k) employer matching program.
- Paid parental leave, paid holidays, quarterly self-care or wellness days, and paid time off.
- Stock options may be available, subject to board approval.
- Learning and development initiatives, including access to LinkedIn Learning, wellness education sessions, and employee resource group events.
- Full-time employees are eligible for the listed benefits.
Tech Stack
Categories
About 6sense
6sense builds a B2B revenue platform that uses intent data and AI to help marketing and sales identify in‑market accounts, run account‑based campaigns, and prioritize outreach. The company sells its software via SaaS subscriptions and integrates with common CRM and marketing automation tools. Founded in 2013 and headquartered in San Francisco, it is privately held and serves midmarket and enterprise B2B organizations.