Position: Senior Security Engineer
Company: Restream
Experience required: 3y
English level: upper

Restream is looking for a talented Security Engineer to join us to solve complex challenges and build world-class products. In this role, you will conduct architecture security reviews, application testing, penetration testing, and work with the engineering team, security researchers, and third-part

Restream is looking for a talented Security Engineer to join us to solve complex challenges and build world-class products. In this role, you will conduct architecture security reviews, application testing, penetration testing, and work with the engineering team, security researchers, and third-party vendors to ensure the security of our systems as we rapidly scale our product and organization. You understand the importance of simplicity and reliability, and you calculate the impact of every decision on each. We believe in small teams where each member contributes significant value.

Responsibilities:
- Perform application and penetration testing.
- Work with engineers to analyze systems, threat model new features, and create responsive controls to ensure end-to-end customer protection.
- Work with third-party vendors to perform annual application and penetration testing reports.
- Ensure that Restream is SOC2 and ISO 27001 compliant and certified; ensure GDPR and CCPA compliance.
- Work with engineering leadership to develop, implement and maintain security policies.
- Own, maintain, and grow our private bug bounty program; lead the transition to a public bug bounty program.
- Give and receive code review feedback with the team.
- Maintain a pulse on emerging technologies and discover hidden opportunities in our environment.
- Ensure security and resilience of Restream production infrastructure.

Requirements:
- A scrappy, entrepreneurial attitude that gets high-quality projects done quickly.
- Expert in web applications vulnerabilities and attack vectors.
- Experience manually testing web applications and performing penetration testing, as well as using automated tools for reconnaissance and discovery.
- Experience with scripting languages and at least one general-purpose programming language. Node.JS (TypeScript) or Rust would be a plus but are not a requirement.
- Experience in working with third-party vendors for application and penetration testing and certification would be a plus.
- Expertise with security and privacy standards such as GDPR, CCPA, SOC1/2, and ISO 27001.
- Strong written and verbal communication skills.
- Self-directed, analytical, and work well in a team environment.
- Passionate about keeping Restream customers and employees safe online.

Restream is the #1 solution for creating professional live videos and streaming them to all social networks at once. Millions of people around the world use Restream to reach, engage, and monetize their audiences. We’re a small and diverse group of dreamers who make technology work for the world. We believe that a small but highly driven and focused team can make a lasting impact in any area.

What we offer:
- Startup environment and a flat company structure
- Work closely with founders and team to build and grow the product
- Direct influence and impact on the direction of the product and development
- The ability to create something that influences people's lives
- Competitive pay & equity options