Condé Nast Technology Lab

Application Security - Engineer IV

Niantic

Computer Vision Software Engineer, London

Hangar 13


Lead Producer

Cloud Chamber

Senior Producer

Twitch

Software Engineer II - iOS

Inworld AI

Staff Cloud DevOps/Site Reliability Engineer (SRE) - Canada

Wildlife Studios

Tax Planning Specialist

Senior Backend Engineer

Niantic's AR Mapping team seeks a Computer Vision Software Engineer to build 3D world maps for their real-world Metaverse.  Responsibilities include designing, developing, and maintaining production computer vision systems to enhance AR capabilities, collaborating with cross-functional teams to deliver solutions, optimizing system complexity and time, writing high-performance code, and working with the research team to innovate in AR. The role involves working on solutions that will be used by millions.  The ideal candidate will have a Master's degree (or equivalent) in a related field and experience in production code (C++), computer vision, and machine learning.  In-office work is required two days a week (Tuesdays and Thursdays).

Building technologies and ideas that move us as the leaders in Augmented Reality

Creative Production Manager, Tokyo Studio

Software Engineer, Map Location Services

Security Engineer, Production

Staff Computer Vision Engineer, Edge Compute

Software Engineer, Game Development

Senior Producer, Pokémon Go

Data Scientist, Game Analytics (Tokyo Studio)

Game Designer

<div class="job__description body"><div>Niantic’s Augmented Reality (AR) Mapping team seeks a Computer Vision Software Engineer to help build the 3D world maps that are the foundation for Niantic’s real world Metaverse and push the frontiers of Computer Vision and Machine Learning.
We are building the VPS and visual maps that help develop AR experiences to “inspire people to explore the world together”.
We’re a highly collaborative and engaging team, working to help algorithms evolve from concept to production at scale, and this is your chance to join us in our journey to map the world. We are all passionate about innovation, so we’re looking for engineers who want to learn and ship products that will be used by millions of developers and users.
<h3>Responsibilities</h3>
<ul>
<li>Design, develop and maintain production computer vision systems that are used to improve Niantic’s AR capabilities for the delight of our users.</li>
<li>Collaborate multi-functionally with products, operations and other engineering teams to ship state-of-the art computer vision solutions to enable new AR experiences.</li>
<li>Optimize complexity and time of solutions to make the best use of current technologies in cloud and/or mobile.</li>
<li>Write high performance code, debug solutions to complex problems that span systems, prioritize tasks effectively, and efficiently to meet agreed timelines.</li>
<li>Work with Niantic’s research team to invent, evaluate and help productionise solutions to push the boundaries of what can be done today in AR.</li>
<li>Collaborate with cross-functional team members and stakeholders, including regular and reliable attendance and participation in meetings.</li>
<li>Required in-office 2 days on Tuesday and Thursday.</li>
</ul>
<h3>Qualifications</h3>
<ul>
<li>Master-level qualification in Computer Science, Electrical Engineering, or a related field, or equivalent practical experience.</li>
<li>Experience writing production code in C++.</li>
<li>Solid understanding of computer vision, machine learning or similar concepts.</li>
<li>Ability to work in a fast-paced hybrid environment and handle stress appropriately and/or ability to solve practical problems and be sufficiently adaptable to handle dynamic situations with little advance notice.&nbsp;</li>
<li>Experience working on cross-functional teams with ability to communicate effectively through written and verbal communications, including asynchronous interactions with others.</li>
</ul>
<h3>Plus If…</h3>
<ul>
<li>PhD-level qualification in Computer Science, Electrical Engineering, mathematics, or a related field, or equivalent practical experience.</li>
<li>Demonstrated ability developing algorithms for image processing, computer vision or similar endeavors.</li>
<li>Experience implementing, hardening or optimizing 3d gaussian splatting, dense depth computation, multi-view reconstruction or other problems in 3D computer vision.</li>
</ul>
The total compensation package for this position includes a new hire offer base salary range of £87,300.00-£126,000.00 + bonus + equity + benefits.
Individual pay within this salary range is determined by work location and additional factors, including assessed job-related skills, experience, and relevant education or training. Your recruiter can answer any questions about new hire total compensation during the hiring process. An overview of benefit offerings for your location can be found on the careers page.
<h3>Join the Niantic team!</h3>
Niantic's global-scale augmented reality platform and digital map powers spatial computing experiences in the real world. Incubated out of the Maps team at Google, Niantic first created Ingress and then Pokémon GO, a cultural phenomenon and hit game played by tens of millions of people each month. Niantic’s Lightship platform, which powers Pokémon GO, also supports the company's other games including Pikmin Bloom, Peridot and Monster Hunter Now. Developers use Niantic’s platform to build their own AR applications and experiences, either with the Lightship Platform or directly through the web with 8th Wall.
We believe that cultivating a workplace where our people are supported and included is essential to creating great products our community will love. Our mission emphasizes seeking and hiring diverse voices, including those who are traditionally underrepresented in the technology industry, and we consider this to be one of the most important values we hold close.
Niantic is a hybrid first company. We believe that in person interaction and collaboration fosters creativity, a sense of community, and is critical to our future success as a company. Our hybrid work schedules allow for a mix of remote and in-office work.
We're a hard-working, fun, and exciting group who value intellectual curiosity and a passion for problem-solving! We have growing offices located in San Francisco, Sunnyvale, Palo Alto, Bellevue, Kansas, London, Tokyo, Hamburg, Hyderabad, and Zurich. #LI-HYBRID</div></div>

Condé Nast seeks an Application Security Engineer IV with 5+ years of experience in Application Security and DevSecOps. Must have expertise in Secure Development Lifecycle, CI/CD, OWASP Top 10, Threat Modeling, and experience in a global organization. Knowledge of cloud, containers (Kubernetes, AWS, Docker, AWS EKS), GitHub, and security tooling is essential.

<div class="jobs-box__html-content jobs-description-content__text t-14 t-normal
 jobs-description-content__text--stretch" id="job-details" tabindex="-1">
 <h2 class="text-heading-large">
 About the job
 </h2>

 <div class="mt4">
 
 JOB DESCRIPTION Condé Nast is a global media company, home to iconic brands including Vogue, The New Yorker, GQ, Glamour, AD, Vanity Fair and Wired, among many others. The company's award-winning content reaches 84 million consumers in print, 367 million in digital and 379 million across social platforms, and generates more than 1 billion video views each month. The company is headquartered in London and New York, and operates in 32 markets worldwide, including China, France, Germany, India, Italy, Japan, Mexico &amp; Latin America, Russia, Spain, Taiwan, the U.K. and the U.S, with local licensed partners across the globe. The Cyber Security Team provides the security services that underpin Conde Nast’s security posture and enhance the organisation's security profile. The Cyber Security Team is responsible for; Information Security and Cyber Risk management, Security Operations and the global SOC, Security Architecture and Application Security as well as Security Engineering. This role sits within the Cyber Security team reporting into the Security Architecture and Engineering Manager and provides the team with application security expertise that will allow the team to fully engage with the Development and Engineering teams and work with them to embed security into their development lifecycle. The successful candidate will own and manage Cyber Security relationships with key stakeholders within the Platform, Development and Engineering teams. Conde Nast employs a large development team that develops around 250 products or services across the business which are predominantly consumed by our customers across the globe. As such we have a massive focus on ensuring all products we build and develop are done so securely. We are seeking someone who is an SME in the areas of Application Security and DevSecOps and has worked in a lead role within a global organisation for a number of years.The candidate will ideally come from a development background and will have demonstrable expertise in Application Security, DevSecOps, S-SDLC and relevant CI/CD methodologies. The applicant will act as the lead on all Application Security initiatives as well as initiatives which support securing the overall development lifecycle. They will use their expertise to identify security gaps in our current application development lifecycle and processes and propose remedies to improve security throughout the lifecycle. Additionally they will support with recommendations to shift security left such as to support us to operate in a truly dedicated DevSecOps manner.The applicant should have an understanding of Application Threat modelling methodologies and will have experience of performing Threat modelling having previously used various tools in performing these.The applicant should look to actively promote adoption and use of such methodologies and ensure security requirements are understood and embedded into the development lifecycle. Duties: <ul><li>Work collaboratively with Product, Engineering and Global Architecture teams to identify vulnerabilities at the design stage. </li><li>Engage regularly with development teams to discuss any security concerns relating to products or applications.</li><li>Act as an SME on application vulnerabilities and support with detailing remediation steps to developers. Provide advice where required to assist with remediation.</li><li>Perform manual testing to ascertain whether vulnerabilities are true positives and validate automated test scan results if required.</li><li>Administer and maintain our SCA, SAST, IaC, Container and DAST security solutions, ensuring tooling is fit for purpose and providing value, as well as new features are being utilised. </li><li>Support with onboarding development teams onto security tooling and integrating tools into their CI/CD pipeline, ensuring their applications are regularly being scanned for vulnerabilities.</li><li>Drive security improvements and enhancements within the products and applications Conde Nast develops.</li><li>Identify gaps in our application security controls and make recommendations for improvements to tooling or processes to resolve the gaps and improve security.</li><li>Support with Code Reviews/Analysis. Knowledge of Java, Java Script and NodeJs is essential.</li><li>Support with arranging third party penetration testing against key applications or services.</li><li>Provide business stakeholders and the GRC team with reporting on application vulnerabilities and KRI’s across our application portfolio.</li><li>Develop and maintain all documentation for our Application Security Tooling, including processes and procedures for onboarding and offboarding teams and utilising tools in general.</li><li>Regularly update and maintain our Application Security standards, best practices and guidelines within Confluence to ensure developers have a central location to reference.</li></ul>
 Required Skills:To be successful, the candidate will need to have and demonstrate the following knowledge, skills and experience, along with a proactive focused attitude; <ul><li>Minimum 5 years experience in Application Security and Engineering.</li><li>Minimum 5 years experience in Secure Development Lifecycle</li><li>Thorough knowledge of CI/CD and DevSecOps principles.</li><li>Awareness of application security flaws and web application best practices (e.g. OWASP Top 10, CWE SANS Top 25) </li><li>Understanding of STRIDE, or other Threat modelling or applicable methodologies</li><li>Experience of working in a geographically dispersed organisation with varied stakeholders.</li><li>Experience of implementing security within a DevOps environment i.e. adopting a shift-left approach within Application Security.</li><li>Knowledge of cloud and containers essential (Kubernetes, AWS, Docker, AWS EKS)</li><li>Experience of having worked with GitHub and GitHub actions is essential.</li><li>Experience of using Static and Dynamic Code Analysis tools (Snyk and Rapid 7 AppSec are beneficial)</li><li>Awareness and experience of the NIST framework and PCI-DSS Standard.</li><li>Experience of container vulnerability scanning or securing containers.</li><li>Experience of programming / development technologies, (this will be tested at interview)</li><li>Experience of AWS WAF implementation and AWS services in general.</li><li>Good communication, presentation and written language skills.</li><li>Knowledge of development methodologies e.g. Agile</li></ul>
 Educational Qualifications: <ul><li>BS Computer Science or similar qualification </li><li>Application Security certifications (CEH, CASE, CSSLP or similar)</li></ul>

 
 </div>
 </div>