Boostsecurity.io is a cybersecurity technology startup. Our mission is to enable software teams to easily ship secure software, and secure their software supply chains, through smart security automation that developers love.
Founded by veteran industry experts in application security, cloud and OSS engineering, BoostSecurity is headquartered in Montreal, Canada, with US operations in Silicon Valley, California, serving the needs of modern global customers and providers of technology, health, finance, logistics, human resources and cybersecurity.
The RoleBoostSecurity is looking for Security Research Engineers to expand our team in Montreal and help us continue to grow our product. We are building technology for technologists, and this will be an opportunity to work on a high-performing security team supporting a fast-growing security technology. This role is ideal for a Senior Engineer interested in cutting edge security research related to software supply chain security.
Requirements
What you'll work on as part of our team:- Design, implement, and test security capabilities on our platform that will secure thousands of companies for the decade to come !
- Work with a PM, Designer and other engineers to ship in a quick-moving, iterative environment; we are constantly balancing between moving quickly and maintaining a high bar for our code and product
- Conduct security research that covers Application Security, Cloud Infrastructure, Developer tooling, CI/CD tooling, open source software (vulnerabilities in OSS packages), and more.
- Advanced Application Security / DevSecOps knowledge, ideally with both practitioner-in-the-field experience as well tool builder:
- SAST/DAST/IAST experience
- Cloud security expertise (Cloud Native Security technology)
- Modern secure software development processes and tools
- Software development skills:
- Although this is not a software development position, uou will be using Python quite extensively here - to automate parts of your security research, as well write PoC's….
- Comfort working in a highly agile, intensely iterative software development process