Senior Application Security Engineer

Job Description

Prodigy Education connects students, parents, teachers and school districts with resources that promote a lifelong love of learning. Anyone with an internet connection is welcome to create a free account and try the most effective and engaging K-8 math platform in the world. Our business model helps us connect with youth around the world, with over 100 million students now voluntarily practicing math every single day — and enjoying it! At Prodigy Education, we have an incredible team that works tirelessly to turn our goal of making education a human right into a reality. We are immensely grateful for our amazing team and all they do every day. We welcome people who share our passion to join our team, where you will have the opportunity to help an entire generation of students to LOVE learning. Our passion is our mission - to help every student in the world love learning! Please note: During the Covid-19 pandemic, in order to keep all our candidates safe, Prodigy is hiring and on-boarding 100% remotely for the time being.

Overview:

• Here at Prodigy, we are working hard to achieve our mission of helping every child in the world to LOVE learning. Our Engineering teams are scaling rapidly as we continue to hit our product and growth milestones, and it’s an exciting time for the company! To continue our exponential growth, we are adding some more management power to our Engineering teams.
• As an Application Security Engineer, we would be looking to you to guide teams to build secure software while maintaining the speed of software delivery to enable us to ship faster, and better so that we can give all children access to fun math education.

Your Impact:

• You will be the part of rapidly scaling Cyber Security team to hit our ambitious growth targets
• Your leadership will enable our product teams to ship the secure product
• Through 1:1s and consistent coaching, the manager will help you level up and further your careers
• Prodigy will look to you to bridge communication gaps between multiple cross-functional product and technology teams like Product, Art, UX & Design, Development, and QA
• You will unlock team potential and productivity by ensuring that teams have access to the resources they need, such as computing systems, development tools and communications.

Who You Are:

• Experience with static/dynamic analysis, and common exploit tools and methods
• Experience with OWASP SAMM or other security assessment standards
• Experience with code reviews
• Familiarity with the OWASP Top 10, and are comfortable discussing and advising others on application vulnerabilities.
• Participation in Bug Bounties, CTFs or similar activities
• Provide consultation to product teams in security architecture & design, and conduct security reviews of new products and services
• Drive the implementation of a secure SDLC, ensuring that secure design principles, coding standards and verification are included in every product release
• Maintain strong knowledge of current security threats, mitigations and operational best practices
• Provide security training, outreach, and guidance to our internal development teams
• Experience with threat modelling, security assessments, and broader security technologies
• Experience with leading and managing product teams and have a proven track record of success
• Develop education and training to ensure developers have the right level of defensive coding and threat modelling skills to successfully deliver secure code.
• Excited by the challenges that come with a rapidly growing and scaling company, and have thrived in this kind of environment
• A strong leader with the ability to set a vision for your team, and lead them to strong execution and delivery
• Coaching and mentorship is your passion - you thrive on seeing your team members grow and develop personally and professionally
• Not afraid to stretch yourself outside of your comfort zone to take on new challenges, and have a love for continuous learning

Our Core Technologies:

• Backend: Node.js , GraphQL, Postgres, DynamoDB, Redis, AWS, Lambda
• Game: HTML5, Canvas, WebGL, Phaser, Pixi, Typescript
• Frontend: React, Reactive Native, ES6

Bonus Points For:

• CISSP, CISM, Security+ certification
• Experience with penetration testing tools
• Agile work flow experience
• Experience in the educational software space
• A strong passion for education
• Previous experience scaling in a startup environment

What We Offer:

• The opportunity to build a career of value and witness first hand the impact Prodigy has as the most engaging math platform in the world!
• A culture of transparency, where team members are involved in important conversations
• No micromanaging here! We believe in our employees skills and abilities, we encourage you to bring new innovative ideas to your team
• Full health benefits from day one (1) for you and your family, fully covered! Nothing is ever taken off your pay cheque
• We are a profitable company, with eligibility to participate in stock options for all employees
• Late or early riser? We understand! We offer flexible working hours that allow you to schedule your 8 hour day with a bit more flexibility. We do have core office hours, to ensure team members can be present for important meetings and department needs. Our core office hours are 10:30am - 3:00pm
While we operate 100% remotely for the time being, our company culture and values remain at the core of everything we do. We are offering a number of remote-friendly activities such as:
• Virtual trivia
• Zoom meditation, stretching, and fitness sessions
• Daily remote challenges via Slack
• Virtual “Prodigy Prepares” cooking series featuring our very own employees!
• Remote work employee budget for things like home office equipment etc.
When this pandemic comes to an end and it is safe to be back in the office here's a glimpse into what you can expect:
• Feel like a different work environment? Work from home 1x a week!
• Team building events that not only include you as a Prodigy employee, but your significant other and children as well
• Company pizza lunch every second week for ‘All Hands’, where we discuss important Prodigy milestones
• Do you need some fun to help break up your day? We have that covered! Join in some Ping Pong games, Smash Bros competitions or board games!

Come as you are We believe the power of our collective potential will transform education. We are building towards a diverse, inclusive, and equitable workplace to empower and create access and opportunity for all. We welcome applications from people from all underrepresented groups, including (but not limited to) people of any gender, age, or religion, members of the LGBTQIA2+ community, BIPOC and other underrepresented races and nationalities, people with disabilities, veterans, and anyone who may contribute to the further diversification of Prodigy Education. If you feel like you don’t have all the qualifications for this position, and are willing to use your initiative to learn the rest, we’d still love for you to apply! We are an equal opportunity employer and are committed to providing employment accommodation in accordance with the Ontario Human Rights Code and the Accessibility for Ontarians with Disabilities Act, 2005 (AODA). Prodigy Game will provide accommodations to job applicants with disabilities throughout the recruitment process. If you require an accommodation, please notify us and we will work with you to meet your needs. Apply for this job