Senior Software Engineer (Security Development)

• We are looking for a Senior Software Engineer to join our new Security Development team
• This team is focused on building durable, secure-by-default solutions to protect Asana’s infrastructure and product
• Instead of acting as gatekeepers, we build guardrails that empower engineering teams to move quickly and safely
• You will be responsible for engineering preventative controls at scale, focusing on building platforms and frameworks that eradicate systemic risks
• Design, build, and maintain secure-by-default frameworks, libraries, and platforms to eliminate entire classes of vulnerabilities
• Engineer and improve core security services, including our access control frameworks, secrets management infrastructure, and AWS permissions systems
• Develop and own the platform for vulnerability remediation, creating tooling that empowers engineering teams to address risks efficiently
• Partner with product and infrastructure teams to architect and implement foundational security controls for Asana including cloud networking, and compute infrastructure
• Partner with product teams to effectively offer recommendations for how to secure projects at all phases of implementation (design, development, launch, and/or incidents)
• Influence engineering initiatives through design reviews, communicating security principles, and helping teams make sound security trade-offs

Benefits

• Benefits - From comprehensive health benefits including mental health programs and coaching to our in-house culinary program and supportive parental leave policies, our benefits are intentionally designed to ensure that you are energized, focused, and thriving
• Development: We know that growth isn’t always linear, so we’ll support you in achieving your personal and professional goals. You’ll have the opportunity to take on big responsibilities that impact our success as a company and challenge you in new and fulfilling ways.
• Career growth: Your growth at Asana centers on ownership, access, and choice. All employees can tap into resources that support their growth and their team’s growth in the way that works best for their unique needs.- Expertise in programming and computer science fundamentals
• 4+ years of experience in full-time professional software development, working with large codebases
• A proactive mindset geared towards identifying and eliminating systemic risks, not just individual bugs
• Proven software engineering experience, with a background in building platforms, libraries, or core infrastructure
• Experience with cloud infrastructure and services, particularly AWS
• Strong interest or direct experience in security engineering, with a focus on building preventative controls
• Demonstrates curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making
• Excellent communication skills for collaborating effectively with engineering teams across the organization