Full-Time

Application Security Engineer II

Posted on 1/13/2025

CarGurus

CarGurus

1,001-5,000 employees

Online marketplace for buying and selling cars

No salary listed

Mid, Senior

Boston, MA, USA

Hybrid model; specific in-office days not mentioned.

Category
Cybersecurity
IT & Security
Required Skills
Python
JavaScript
Requirements
  • At least 3 years of experience in Information Security.
  • Experience with modern programming languages, particularly Python and JavaScript.
  • Proficiency with security testing tools such as Burp Suite, ZAP, or equivalent.
  • Hands-on experience with SAST, DAST, and SCA tools (e.g., Checkmarx, Veracode, GitHub Advanced Security).
  • Familiarity with vulnerability frameworks and scoring systems (e.g., CVSS, NIST 800-53).
  • Knowledge of secure design principles, authentication/authorization mechanisms, and encryption best practices.
  • Strong communication skills with the ability to convey complex security issues to non-technical stakeholders.
  • A pragmatic approach to balancing security risks with business needs.
  • A collaborative mindset with a 'can-do' attitude and adaptability to a fast-paced, dynamic environment.
  • Strong organizational and time management skills to handle multiple priorities effectively.
Responsibilities
  • Partner with product and engineering teams to identify potential threats, vulnerabilities, and attack vectors in the design phase with active threat modeling.
  • Perform in-depth analysis of applications, identifying security risks through penetration testing, dynamic/static analysis, and manual assessments.
  • Operationalize and enhance static (SAST), dynamic (DAST), and software composition analysis (SCA) tools in the CI/CD pipeline to streamline security processes.
  • Identify, validate, prioritize, and remediate vulnerabilities, aligning with risk-based methodologies and defined SLAs.
  • Respond to findings from external researchers and bug bounty programs, ensuring timely triage, validation, and remediation.
  • Contribute to the design and implementation of security controls and architecture for new and existing products.
  • Participate in assessing third-party applications and libraries for security risks.
  • Collaborate with engineering teams to embed security best practices throughout the SDLC, providing training and guidance as needed.

CarGurus operates an online marketplace that connects buyers and sellers of new and used cars, primarily in the United States, with additional presence in Canada, the United Kingdom, and Germany. Users can search for vehicles, compare prices, and read reviews on the platform. CarGurus employs advanced algorithms to rank car listings based on price, dealer reputation, and vehicle history, which helps users find the best deals. This focus on data transparency and a user-friendly interface distinguishes CarGurus from traditional car buying methods and competitors like AutoTrader and Cars.com. The company generates revenue mainly through subscription fees charged to dealerships for listing their inventory, along with advertising services and value-added offerings such as financing options and vehicle history reports. CarGurus aims to provide a reliable and efficient platform for car transactions, enhancing the buying and selling experience for both consumers and dealerships.

Company Size

1,001-5,000

Company Stage

IPO

Headquarters

Cambridge, Massachusetts

Founded

2006

Simplify Jobs

Simplify's Take

What believers are saying

  • Digital Deal tool adoption increased 150% among U.S. dealers in 2024.
  • Expansion of Digital Deal to Canada offers significant international growth opportunities.
  • Recent website redesign and app updates enhance user experience and lead generation.

What critics are saying

  • CFO Elisa Palazzo's departure in March 2025 may cause financial management instability.
  • Carvana's strong market presence poses a competitive threat to CarGurus.
  • Economic uncertainty may shift consumer focus to more affordable vehicle segments.

What makes CarGurus unique

  • CarGurus uses proprietary algorithms to rank car listings by price and reputation.
  • The platform offers a unique Digital Deal tool for online car buying processes.
  • CarGurus emphasizes data transparency and user-friendly interfaces in its marketplace.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Company Equity

Hybrid Work Options

Flexible Work Hours

Paid Vacation

Meal Benefits

Commuter Benefits

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

0%

2 year growth

0%
Yahoo Finance
Mar 10th, 2025
Tesla Stock Is Still A Sell After Its 40% Plunge, Ubs Warns

Leaning into the bear narrative on Tesla (TSLA). UBS analyst Joseph Spak reiterated his 12-month Sell rating on Tesla shares on Monday, voicing considerable concern on the near-term demand outlook for the Model 3 and Model Y. He slashed his price target on Tesla to $225 from $259. The consensus price target on the Street is $239, according to Yahoo Finance data. The stock tanked 8% to $242 in early trading alongside a broader hit to markets due to tariff concerns. NasdaqGS - Delayed Quote • USD As of 12:28:59 PM EDT

TipRanks
Feb 24th, 2025
CarGurus Announces CFO Departure and Leadership Shift

Elisa Palazzo will step down as CFO of CarGurus on March 7, 2025.

PYMNTS
Feb 21st, 2025
Carvana And Cargurus Leverage Ai To Drive Digital Transformation In Car Sales

Consumer preferences are moving toward digital experiences in the online car marketplace, and Carvana and CarGurus are leveraging technology and artificial intelligence (AI) to improve the buying process. Both companies reported strong performances in 2024, using digital tools to optimize customer engagement and refine their business models, though each has faced distinct challenges along the way. Carvana’s Strategic Growth Drivers and AI Investment. Carvana recorded a 33% year-over-year increase in retail units sold (416,348) and saw its revenue rise 27%, to $13.67 billion. According to the company’s Q4 shareholder letter, Carvana has three main growth drivers: continuously improving its customer offering; increasing awareness, understanding and trust of the brand; and increasing inventory selection and other benefits of scale

The Manila Times
Jan 8th, 2025
CarGurus to Present at 27th Annual Needham Growth Conference

CarGurus to present at 27th Annual Needham Growth Conference.

Stock Titan
Dec 12th, 2024
CarGurus Examines 2024 Auto Market Influences and Expectations for 2025 Following a Year Defined by Affordability

CarGurus (CARG) has released its 2024 Recap & 2025 Outlook, highlighting that affordability was the key market driver in 2024.

INACTIVE