Security Engineer II (AppSec)

Security Engineer II (AppSec)

Introduction

At NerdWallet, we’re on a mission to bring clarity to all of life’s financial decisions and every great mission needs a team of exceptional Nerds. We’ve built an inclusive, flexible, and candid culture where you’re empowered to grow, take smart risks, and be unapologetically yourself (cape optional). Whether remote or in-office, we support how you thrive best. We invest in your well-being, development, and ability to make an impact because when one Nerd levels up, we all do.

Job Description

We are seeking a Security Engineer II to join our Application Security team. The Application Security team enables NerdWallet’s mission—to provide clarity for all of life’s financial decisions, by helping ensure the products and services we design and build safeguard our users’ data and trust. In this role, you’ll partner closely with engineering teams across the company to reduce security risk throughout the software development lifecycle. You’ll contribute to initiatives that strengthen NerdWallet’s security posture by improving tooling, workflows, and standards that help engineers build secure software while maintaining a great developer experience.

Responsibilities

• Designed and implemented a dashboard for on call activities for the team.
• Helped triage and respond to security findings and alerts generated by application security tools
• Completed a penetration test of an external system, and participated in red team campaigns.
• Collaborated with engineers to remediate vulnerabilities and improve secure coding practices
• Contributed to automation or tooling that improves visibility into application security risks

Impact

Help scale NerdWallet’s application security program through automation, tooling, and developer enablement

• Partner with engineering and product teams to identify and remediate security gaps across multiple systems while balancing business priorities
• Build tools, processes, and automation that improve security posture visibility for engineers and leadership
• Review pull requests and provide actionable feedback