Senior Product Security Engineer

Company: The Trade Desk
Location: Chicago
Posted on: May 28, 2023

Job Description:

The Trade Desk is a global technology company with a mission to create a better, more open internet for everyone through principled, intelligent advertising. Handling over 1 trillion queries per day, our platform operates at an unprecedented scale. We have also built something even stronger and more valuable: an award-winning culture based on trust, ownership, empathy, and collaboration. We value the unique experiences and perspectives that each person brings to The Trade Desk, and we are committed to fostering inclusive spaces where everyone can bring their authentic selves to work every day.Do you have a passion for solving hard problems at scale? Are you eager to join a dynamic, globally-connected team where your contributions will make a meaningful difference in building a better media ecosystem? Come and see why Fortune magazine consistently ranks The Trade Desk among the best small-medium-sized workplaces globally.The Product Security team at The Trade Desk strives to standardize, automate, and scale application security and platform security across the entire Software Development Lifecycle. We are looking for a Staff Product Security Engineer who can leverage software engineering skills and deep security expertise to raise security standards and reduce friction across multiple teams, products, and services in a highly dynamic engineering environment.What you will do at The Trade Desk:* Partner with engineering and product management teams to perform threat modeling, design, and code reviews. Assess security implications, requirements for the secure development of new systems, and technologies. Remediate vulnerabilities in existing ones.* Design, build and deploy automation to scale application and infrastructure vulnerability discovery efforts across thousands of repositories, systems, and microservices.* Identify security/privacy-notable functionality in applications and services. Identify trends, and build out automation to bring security awareness into the affected areas.* Partner with cross-functional teams to help define and execute innovative Product Security strategies. Help mature a best-in-class Product Security program.* Develop automated security testing to validate secure coding best practices.* Support our external researchers through our bug bounty program.* Proactively improve our security frameworks, documentation, tools, processes, and methodologies.Preferred Qualifications:We do not expect all applicants will have skills that match a job description exactly. We strongly encourage applicants with alternative experiences to also apply.We are especially interested in connecting if you have:* Experience working with large engineering teams and codebases in a highly dynamic environment.* Experience with secure code review, penetration testing, SAST, DAST, and common security tools.* Experience with virtualization, containerization technology, orchestration, and security.* Experience adapting product security practices to multiple cloud providers.* Strong understanding and experience with common application security flaws, security controls, and common security libraries.* Experience identifying security issues in applications through code review, threat modeling, penetration testing, manually and with tools.* Software Engineering/Development skillset and mindset. You do not have to be a "Software Engineer," but you can work with code and pass our basic code test.* Experience designing, implementing, and deploying production-quality systems.* Experience advising product teams on how to address a broad set of security and privacy challenges.* You have experience working in enterprise software and SaaS domains.#LI-AD1Our Compensation and Benefits (for NY, CO, CA, and WA residents only)At the Trade Desk, Base Salary is one part of our competitive total compensation and benefits package and is determined using a salary range. The base salary range for this role is$121,500 -$222,800In accordance with NY, CO, CA, and WA law, the range provided is The Trade Desk's reasonable estimate of the base compensation for this role. The actual amount may differ based on non-discriminatory factors such as experience, knowledge, skills, abilities, and location. All employees may be eligible to become The Trade Desk shareholders through eligibility for stock-based compensation grants, which are awarded to employees based on company and individual performance. The Trade Desk also offers other compensation depending on the role such as sales-based incentives and commissions. Plus, expected benefits for this role include comprehensive healthcare (medical, dental, and vision) with premiums paid in full for employees and dependents, retirement benefits such as a 401k plan and company match, short and long-term disability coverage, basic life insurance, well-being benefits, reimbursement for certain tuition expenses, parental leave, sick time of 1 hour per 30 hours worked, vacation time for full time employees up to 120 hours thru the first year and 160 hours thereafter, and around 13 paid holidays per year. Employees can also purchase The Trade Desk stock at a discount through The Trade Desk's Employee Stock Purchase Plan.The Trade Desk also offers a competitive benefits package. Click here to learn more.Note: Interns are not eligible for variable incentive awards such as stock-based compensation, retirement plan, vacation, tuition reimbursement or parental leaveThe Trade Desk does not accept unsolicited resumes from search firm recruiters. Fees will not be paid in the event a candidate submitted by a recruiter without an agreement in place is hired; such resumes will be deemed the sole property of The Trade Desk. The Trade Desk is an equal opportunity employer. All aspects of employment will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.

Keywords: The Trade Desk, Chicago , Senior Product Security Engineer, Engineering , Chicago, Illinois