Staff Software Security Engineer

We’re looking for problem solvers, innovators, and dreamers who are searching for anything but business as usual. Like us, you’re a high performer who’s an expert at your craft, constantly challenging the status quo. You value inclusivity and want to join a culture that empowers you to show up as your authentic self. You know that success hinges on commitment, that our differences make us stronger, and that the finish line is always sweeter when the whole team crosses together. Overview: As Staff Software Security Engineer you will shape the security features of product and provide security expertise to the engineering organization. This role will interface with all levels of engineering to ensure security best practices across system and code design and implementation. Primary Responsibilities: Enhance all security touch points throughout the SDLC with emphasis on design threat modeling, code review, and verification. Design and build security related features for SaaS and desktop products. Provide security subject matter expertise and publish best practices, standards, and policies across areas such as identity and access management, cryptography, web security, cloud security, and more. Participate in investigation and remediation of vulnerabilities affecting software products. Identify security gaps and work with partner teams to implement robust security controls Partner with Software Architecture and DevOps for ensuring security best practices in the ideation phases (Cloud, infrastructure, Kubernetes) Requirements: Minimum 12 plus years of proven experience and demonstrable recurring success delivering software through the SDLC (cumulative over a security and dedicated software development career) Demonstrated project experience with systems development in Modern C++ or development within the cloud-native stack Understanding of how to diagnose software build and scan results, such as CI/CD, SAST, DAST, SCA, and Container scans Able to discuss and provide clear technical guidance on cryptographic concepts like cryptography, hashing, encoding, key management, etc Strong knowledge of software vulnerabilities, mitigations , threat modeling, risk assessment, and vulnerability management Must have strong leadership qualities and provide clear technical communication and guidance. As a security leader you will collaborate with stakeholders across the organization, including software engineering teams and product owners, to provide optimal solutions to difficult problems. Can explain to stakeholders the high level concepts of AuthN/Z. Understand how regulations can impact security roadmaps, and argue their importance to the business Bachelor’s degree and/or equivalent experience in computer science, information technology, or related field  Desirable: Strong experience with SaaS applications and Cloud technology such as GCP, AWS, Docker/Containers, Kubernetes, and microservice architectures Experience developing or maintaining CI/CD and scanning systems (e.g. can implement and maintain a system that helps find vulnerabilities) Demonstrable practical experience implementing or maintaining cryptographic systems/libraries OpenSSL maintenance Other cryptographic library experience is okay as wellNaCl, argon2, bcrypt Strong knowledge of Design patterns and Frameworks Find yourself checking a lot of these boxes but doubting whether you should apply? At Alteryx, we support a growth mindset for our associates through all stages of their careers. If you meet some of the requirements and you share our values, we encourage you to apply. As part of our ongoing commitment to a diverse, equitable, and inclusive workplace, we’re invested in building teams with a wide variety of backgrounds, identities, and experiences.