Ever wondered if there's a better way to protect data, one that actually empowers sharing instead of constantly locking things down? Here at Virtru, we're building exactly that, a world where data security doesn't mean sacrificing collaboration or innovation. We're on a mission to redefine how people think about securing their most sensitive information, enabling freedom and control in every interaction. If you're an Application Security Engineer who loves tackling complex challenges, wants to make a tangible impact, and thrives in a cutting-edge environment, then this opportunity might just be your next big adventure.

Overview

At Virtru, we are fundamentally reshaping the landscape of data security. While others focus on containment, we champion liberation, allowing you to share information intentionally and securely, without sacrificing privacy or control. We’ve developed a powerful suite of data protection applications and an open platform that’s fostering an ecosystem of innovation. Through the Trusted Data Format (TDF) open standard, we are not just protecting data; we are creating a new paradigm where security actively enables sharing rather than impeding it.

Think of our approach as the Android of data protection: a robust platform with an open core that developers and partners can build upon, alongside our own best-in-class applications that truly showcase the possibilities when security is reimagined from the ground up. Backed by leading investors such as Iconiq Capital, Bessemer Venture Partners, Foundry Capital, and Tiger Global, we empower Fortune 500 companies and government agencies to discover that true data security means freedom to share, collaborate, and innovate without compromise.

This is a truly global opportunity, as we operate as a fully remote team, welcoming talent from anywhere in the world.

Key Responsibilities

Design and Implement Secure Solutions: Proactively embed security into the design and development lifecycle of our applications and platform, from conception to deployment.
Conduct Comprehensive Security Reviews: Perform in-depth code reviews, architectural reviews, and threat modeling to identify and mitigate potential vulnerabilities.
Lead Vulnerability Assessments: Execute and coordinate penetration testing, vulnerability scanning, and other assessments to uncover weaknesses in our systems.
Collaborate with Development Teams: Work closely with engineering teams to provide expert guidance on secure coding practices, security best practices, and remediation strategies.
Advance Security Tooling and Automation: Identify, evaluate, and implement security tools and automate security processes to enhance efficiency and coverage.
Stay Ahead of Emerging Threats: Continuously research and monitor the latest security threats, vulnerabilities, and best practices, integrating relevant insights into our security posture.
Contribute to Security Incident Response: Participate in the investigation and resolution of security incidents, helping to protect our systems and user data.
Educate and Mentor: Foster a strong security culture across the engineering organization through training, documentation, and mentorship.

Requirements

Proven Application Security Expertise: Demonstrated experience as an Application Security Engineer or in a similar role, with a strong portfolio of relevant projects.
Deep Understanding of Security Principles: Solid grasp of common application security vulnerabilities, such as the OWASP Top 10, secure coding principles, and the Security Development Lifecycle (SDL).
Programming Proficiency: Competency in one or more common programming languages used for application development and scripting (e.g., Python, Java, Go, C#, JavaScript/TypeScript).
Experience with Security Tools: Practical experience utilizing various security testing tools such as SAST, DAST, SCA, and vulnerability scanners.
Cloud Security Knowledge: Familiarity with cloud security concepts and experience securing applications deployed in major cloud environments (e.g., AWS, Azure, GCP).
Identity and Access Management: Understanding of authentication and authorization mechanisms, including OAuth, OpenID Connect, and SAML.
Excellent Communication Skills: Ability to clearly articulate complex security issues and recommendations to both technical and non-technical audiences.
Collaborative Spirit: Eagerness to work effectively within cross-functional teams in a fast-paced, remote-first environment.
Educational Background: A Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

What You'll Gain

Shape the Future of Data Security: Play a pivotal role in a company that is truly innovating and redefining how data is protected and shared globally.
Impactful Work: Contribute to an open standard (TDF) and cutting-edge applications used by Fortune 500 companies and government agencies.
Competitive Compensation: A rewarding annual salary between $180,000 - $200,000, reflecting your expertise and contribution.
Remote Flexibility: Enjoy the freedom and work-life balance of a fully remote, worldwide work environment.
Growth and Development: Opportunities for continuous learning and professional growth within a supportive and forward-thinking team.
Collaborative Culture: Be part of an organization backed by prominent investors, fostering an environment of innovation, trust, and mutual respect.