Security Engineer

We're a fast-growing startup founded at Harvard's Innovation Labs. Our mission is to move the world of work from the Earth to the Cloud . We're doing this by building the world's first MMOW ('massively multiplayer online workplace') where the world's best teams work from, form communities, and socialize.

People spend the majority of their lives working - and there is no reason it shouldn't be delightful, functional, and all online. This would let people live their own lives on their own terms, wherever in the world they'd like. They'd be able to spend more time with loved ones, they'd be able to travel, and we as a group could then completely eliminate the need to commute into busy, expensive city centers. Once we start to make digital work wonderful and connected, we make remote work something that companies embrace and encourage. At scale - imagine what that does for our collective carbon footprint. We could really save the world here, people!

To do this, we've been hard at work building what will be a massive, open-world workplace, with private buildings and community, social spaces alike. Think 'World of Warcraft', but for work (World of Workcraft, anyone? ...No one? Ugh fine ). This is a place where business moves, community is made, and social events happen.

We'd love for you to join us!

Work as a team with different programmers from different parts of the world. Organization and excellent communication is fundamental.

Test to analyze our security, and implement appropriate fixes.

Find and remove outdated and vulnerable code and code libraries.

Stay on top of current and emerging security trends, vulnerabilities and threats.

Ensure our security certifications are always up to date.

Educate other developers on secure coding best practices.

Assess security tools and integrate tools as needed, particularly open-source tools

Possibly be beaten at Mariokart by Vish, or Eddy's girlfriend Olivia.

3+ years of software development experience, including working with cloud platforms

Familiarity with common security libraries, security controls, and common security flaws that apply to JavaScript and Rust applications.

The ability to discover and patch SQLi, XSS, CSRF, SSRF, authentication and authorization flaws, and other web-based security vulnerabilities (OWASP Top 10 and beyond).

Knowledge of common authentication technologies including OAuth, SAML, CAs, OTP/TOTP.

Knowledge of browser-based security controls such as CSP, HSTS, XFO.

Experience with standard web application security tools such as Arachni, Brakeman, and BurpSuite.

An understanding of how to write code that is not only secure but scales to a large number of users and systems.

Proficiency with TypeScript / JavaScript