Security Software Engineer - Remote

Overview

Frontdoor is reimagining how homeowners maintain and repair their most valuable asset – their home. As the parent company of two leading brands, we bring over 50 years of experience in providing our members with comprehensive options to protect their homes from costly and unexpected breakdowns through our extensive network of pre-qualified professional contractors. American Home Shield, the category leader in home service plans with approximately two million members, gives homeowners budget protection and convenience, covering up to 23 essential home systems and appliances.

Frontdoor is a cutting edge, one-stop app for home repair and maintenance. Enabled by our Streem technology, the app empowers homeowners by connecting them in real time through video chat with pre-qualified experts to diagnose and solve their problems. The Frontdoor app also offers homeowners a range of other benefits including DIY tips, discounts and more.

Summary :
As an Application Security Engineer at Frontdoor, you will be responsible for the security of all applications and services offered by Frontdoor and provide security support for engineering teams leveraging those services. The Frontdoor Info Sec team works with microservice, application and mobile development teams to design and build secure solutions, participate, and coordinate cross-organizational security initiatives, and solve security challenges at scale.

This individual will participate in a wide range of security efforts and assist with security tools integration, especially client-side (front-end) tools. This role requires partnering with other security engineers and SMEs from different business lines to help identify and remediate security risks and threats as well as diving deeply into tactical aspects of security. Successful Security Engineers at Frontdoor are self-starters, able to work autonomously, natural problem solvers, collaborative, and not deterred by adversity or ambiguity.

In addition, you should have strong problem-solving skills, excellent communication skills and a good technical understanding of modern cloud security architectures.

Job Responsibilities :

• Work with fellow members of the Security Engineering Team to develop and implement a complete security stack that provides endpoint management, vulnerability management, DDoS protection, data protection, and incident management.

• Own the administration of our Git Lab instance, ensuring its smooth operation, performance and security.

• Lead the team’s front-end development responsibilities to:

• design and develop MFEs and API client libraries to be coupled with React and Next.js applications.

• review MFEs and front-end applications to ensure there are no security vulnerabilities.

• Work with engineering teams across Frontdoor to prioritize security issues and find collaborative resolutions.

• Provide expert advice and consultancy to internal customers on risk assessment, incident triage, threat modeling, and security vulnerability mitigation.

• Mentor and guide newer security engineers on best practices, collaborative approaches and evaluating risk.

• Help drive internal process improvement projects, including the development and implementation of internal security tools.

• Help create and socialize security guidance documentation and assistance with security metrics delivery and system improvements.

• May include other job responsibilities duties as applied.

Required Skills:

• Experience in Information Security, Cybersecurity, Identity and Access Management (IAM), and Information Technology, including accountability for complex tasks and projects

• Expertise in Git and Git Lab administration

• Hands-on experience securing cloud applications and infrastructure (AWS, GCP, Azure)

• Solid understanding of security vulnerabilities, attacker exploit techniques, and methods for remediation

• Strong Experience with React and Next.js.

• Expertise in HTML, CSS, Type Script and Java Script

• Experience with Micro Frontends

• Knowledge of application state management libraries such as Redux

• AWS, GCP, or Azure cloud infrastructures

• Intermediate or better abilities in one or more coding/scripting languages (such…