Security Engineer • Mid-Level

Who you are

You have a strong background in security engineering with experience in conducting security architecture reviews and penetration testing. You understand the importance of a security-first mindset and are passionate about fostering a culture of security within teams. You have experience working collaboratively with IT, infrastructure, and product teams to ensure secure software design and implementation. You are skilled in identifying and remediating vulnerabilities and have a proactive approach to addressing security threats. You thrive in a hybrid work environment and are comfortable working both independently and as part of a team.

Desirable

Experience with bug bounty programs and automated security tooling is a plus. Familiarity with various assessment methodologies for application security vulnerabilities will help you excel in this role. You are also encouraged to bring any additional certifications or training that demonstrate your commitment to security best practices.

What you'll do

As a Security Engineer on the Red Team, you will conduct security architecture reviews and threat modeling for new features and services across Asana's products and internal applications. You will perform penetration testing to identify application security vulnerabilities and work closely with engineering teams to triage, investigate, and drive remediation of vulnerabilities identified through internal tests and bug bounty programs. Your role will involve influencing engineering initiatives by conducting design and roadmap reviews, ensuring that security considerations are integrated into the development process from the outset. You will champion a security-first mindset across the organization, helping to scale security practices and promote awareness among team members.

What we offer

Asana offers a supportive work environment where security is a foundational aspect of our mission. You will have the opportunity to work in a key engineering hub in Warsaw, with a hybrid schedule that allows for flexibility. We value collaboration and encourage you to apply even if your experience doesn't match every requirement. Join us in building technology that drives positive change in the world and fosters a culture where everyone feels they belong.