Security Engineer

At Fi you will :

• Identify critical flaws in our web applications and cloud infrastructure that could be exploited.
• Collaborate with peers to write and review technical proposals, architectural diagrams, application code and cloud formation.
• Reduce assessment time by maintaining specifications and tooling. Improve the scope of our assessments by adding new techniques and new categories of vulnerability assessments.
• Educate the organization to pre-emptively develop secure services and to prevent security regressions by organizing talks and preparing written articles.

You should apply if you have:

• Between 1-4 of experience as a Security Engineer or working as a Software Engineer with deep involvement in securing web applications.
• The ability to understand complicated information-flows along with the ability to use one or more high-level programming language.
• The understanding of web technologies such as Browsers, JavaScript, APIs, Websockets, Databases, Front-End and Back-End systems.
• The understanding of web security mechanisms (such as SOP, CORS, CSP, Subresource Integrity, and same-site cookies)
• The awareness of applications implementing OAuth, SAML and JWT authentication.