Application Security Engineer

About This Role

Key ResponsibilitiesAI-extracted

• 1
  Conduct security architecture reviews and threat modeling for new features and services across Asana's product and internal applications.
• 2
  Perform vulnerability assessments of software and systems, using a range of assessment methodologies to surface and prioritize security weaknesses.
• 3
  Triage, investigate, and drive remediation of vulnerabilities from Asana's bug bounty program and automated security tooling.
• 4
  Influence engineering initiatives by conducting design and roadmap reviews, effectively communicating security constraints, and assisting teams in making informed trade-offs.
• 5
  Investigate product security incidents as a subject matter expert, using logs and monitoring tools to assess scope, impact, and root cause.

RequirementsAI-extracted

• 5+ years of experience in application security, product security, or software engineering with a security focus.
• Strong software engineering background with experience in languages like Python, JavaScript/TypeScript or Scala.
• Deep working knowledge of the OWASP Top 10 and common web application vulnerabilities such as XSS, CSRF, SSRF, and SQL injection.
• Experience with security tools for static/dynamic analysis (SAST/DAST), software composition analysis (SCA), and vulnerability management.

Perks & BenefitsAI-extracted