Job Description

What’s the role?

Etsy Security has a unique opportunity to bring in a Senior Software Engineer to join our Appsec Team! As part of the larger Security and Privacy Engineering org, we help product teams build secure software and develop and maintain security critical parts of our web application. We do this by partnering at the design stage for larger features, reviewing code, developing threat models, and leading security initiatives.

This role requires experience with software development since you’ll be designing and implementing security critical features. To that end, you’ll be responsible for adding to our PHP monolith and building in Go for all new features & services. You’ll use threat models and penetration testing results to drive and prioritize development projects. We will lean on your expertise and give you autonomy to explore your curiosity and build secure software!

This is a full-time position reporting to the Engineering Manager, Application Security, and the base salary range will be $155,000 to $181,000 per year. In addition to salary, you will also be eligible for an equity package, an annual performance bonus, and our competitive benefits that support you and your family as part of your total rewards package at Etsy. For this role, we are considering candidates based in the United States, however candidates living within commutable distance of the Etsy Brooklyn Hub, or within the San Francisco area, will be the first to be considered. Even if located within commuting distance of an office, you will have the option to work office-based, flex, or remotely.  Etsy offers different work modes to meet the variety of needs and preferences of our team. Learn more about our Flex and Office-based work modes and workplace safety policies here.

What’s this team like at Etsy?

The Application security team is responsible for the security of everything that’s developed at Etsy, including Etsy.com, Etsy apps, internal applications (Atlas, go/staff). This team works with any team that develops software at Etsy, especially teams with lots of security impact. This team is working on impactful projects like revamping the cryptography library and migrating our locking system.

What does the day-to-day look like?

• Work with teams when they’re in the design phase
• Code reviews once it’s written by the teams, Internal pen testing
• Identify security patterns across teams to deploy across the org
• Develop tools and services to make Etsy safer
• Of course, this is just a sample of the kinds of work this role will require! You should assume that your role will encompass other tasks, too, and that your job duties and responsibilities may change from time to time at Etsy’s discretion, or otherwise applicable with local law.

Qualifications

Qualities that will help you thrive in this role are:

• Experience with backend development. Frontend experience a plus
• You have experience working with development teams to design or architect solutions to mitigate classes of vulnerabilities
• You have threat modeling and pentesting experience
• This role requires an interest in research into security best practices and new technologies from the industry. You should have an itch to learn and dig deeper! 
• As your knowledge around security expands, you’ll lead engineering-wide security initiatives and develop trust and influence within Etsy Engineering
• You’ll be most successful if you have experience developing large scale software in PHP and are familiar with cloud computing environments (GCP or AWS)