Senior Application Security Engineer

Experience with scripting languages (e.g., Python, Bash), APIs, and integration for automation of security tasks.
5+ years of experience in a security operations and/or vulnerability management role.
Bachelor’s degree in Computer Science, Information Security, or a related field.
Excellent communication and teamwork abilities.
Experience with macOS MDM and cloud-native environments, (e.g. AWS or GCP) is required.

Continuously monitor security infrastructure, identify suspicious activities
Utilize data and security tools to analyze and respond to security alerts
Lead and coordinate incident response efforts by executing the incident response strategy through incident remediation and closure
Monitor and maintain vulnerability reporting and bug bounty programs
Triage vulnerability and threat notifications to determine priority and necessary remediation
Conduct regular security audits and vulnerability assessments to identify threats and reduce risk
Evaluate, implement and maintain security controls across devices and cloud environments
Work closely with IT, DevOps, and Cloud Infrastructure to integrate security practices and tools
Build integrations, and implementations of technologies to support security operations
Script and automate integrations, detections, and security reporting
Champion security by providing awareness training for new hires and employees
Stay informed about emerging threats and vulnerabilities, and update security measures accordingly
Maintain detailed and up-to-date documentation of security procedures, policies, and protocols
Ensure compliance with relevant regulations and standards (e.g., GDPR, HIPAA, ISO 27001)
Assist with internal and external security audits
Participate in in-person Nextdoor events, trainings, off-sites, volunteer days, and other team building exercises
Build in-person relationships with team members and contribute to the KIND culture that Nextdoor values.

Experience with security cloud-based microservices infrastructure and IaaC
Experience with IdPs, SSO, and Identity and Access Management
Threat driven or offensive security mindset with practical defense experience
Experience building dashboards for security metrics and cross-org security posture
Data analytics, data engineering, data science, or ML/AI experience
Hands-on certifications (e.g. OSCP, Certified Ethical Hacker, SANS) and/or demonstrated code projects. Please share your github or public code samples with us!