Note: The job is a remote job and is open to candidates in USA. Render is building a modern cloud platform for developers creating AI-native applications, aiming to simplify infrastructure management. The Software Engineer, Security role involves full-stack security ownership, proactive threat assessment, and collaboration with development teams to enhance security features.

Responsibilities

• Build internal tooling to enable secure access to resources (e.g., wrappers, utilities, authentication services, and proxies)
• Implement detection and monitoring systems that alert the team to high signal vulnerabilities
• Analyze and assess security issues identified through threat modeling, penetration testing, security scans and vulnerability disclosure
• Work with developers on sensitive code paths and educate them on secure design patterns
• Liaise with customers regarding their security and compliance needs, and in return, inform our security program
• Communicate security risks and solutions to technical and non-technical stakeholders as part of company-wide planning and prioritization processes
• Stay up-to-date with the latest security threats, vulnerabilities, and best practices and make recommendations for improvements to our security posture
• Partner with product engineering teams to inform and build thoughtful security features for our customers
• Continually ensure that our systems have appropriate authentication, authorization, and accounting with low internal overhead

Skills

• 6+ years of professional experience in software engineering or security
• Experience designing and building secure web applications, tools, and APIs
• Experience with vulnerability review and analysis
• Strong incident leadership and diligent response
• Empathy toward the rest of the team and our customers
• Strong sense of ownership and ability to make pragmatic decisions about your work
• Detection engineering experience through implementation and maintenance of a SIEM
• Experience with any of the technologies the Render product runs on: Go, Typescript, Kubernetes, Postgres, Terraform, Temporal
• Experience with compliance frameworks such as SOC 2, ISO 27001, HIPAA or PCI
• Proven expertise in exploiting common security vulnerabilities, demonstrating practical experience in identifying and leveraging vulnerabilities to assess security posture
• Experience securing applications and systems through threat modelling and risk assessments
• Active participation and contributions to the security community through public research, blogging, presentations, and other means

Benefits

• 4 weeks of paid vacation.
• 14 weeks of fully paid parental leave for all parents to bond with a newly born, adopted, or fostered child. We will also work with you to create a supportive plan of return.
• Long-term disability, life insurance, and 401K plans.
• 100% employer-paid medical coverage and 99% employer-paid dental and vision coverage for you and a dependent. FSAs and HSAs are available as well.
• Monthly lifestyle stipend for wellness, mental health and therapy, hobbies, etc.
• Monthly cell phone and internet subsidy.
• Commuter benefits for Renders in the Bay Area, and home office stipends for remote Renders.
• Continuous learning benefits & related support.

Company Overview