高级软件工程师 - 应用安全
Sr. Software Engineer - Application Security
关于Backblaze
Backblaze为超过150个国家的消费者、中小企业、企业及开发者提供可靠、高可用的云存储服务。Backblaze B2云存储支持包括备份、媒体、分析和现代AI流程在内的数据密集型工作负载。我们的团队专注于构建安全、持久、可扩展的系统,从一开始就强调应用安全,保护客户使其安全。
但尽管我们过去有很多值得庆祝的地方,未来也有同样多的机会。
职位描述
我们正在寻找一名应用安全工程师,以提升用于支持Backblaze B2云存储和电脑备份软件的应用安全。主要职责是将安全融入产品使用方式、数据存储方式以及客户使用方式中。该职位需要具备开发技能和应用安全知识,以将安全融入产品和新功能中。利用AI是关键。
这是一个需要实际开发经验的职位。该职位需要了解并使用最新的AI技术,以帮助开发和安全工作。主要要求包括:常见网页语言的开发、应用安全和AI工具的使用。
- 利用AI工具和软件
- 构建新的和维护现有的软件安全功能
- 满足现有软件不断变化的软件安全需求
- 按需开发新组件
- 对内部和外部客户面向的应用程序进行安全评估和代码审查
- 与工程师紧密合作,使用AI工具修复安全漏洞
- 开发安全自动化和工具以提高安全性
- 支持漏洞赏金计划和漏洞处理
- 调查新报告的漏洞
- 确定修复方法
- 根据现有应用程序中发现的已知漏洞,向工程团队提供指导
- 理解加密和安全认证
- 了解云环境及其提供的安全
·
- 使用以下技术栈支持和开发大型软件系统
- 在大量服务器上运行的Apache Tomcat
- 包含旧功能的JavaServer Pages(JSP)
- 使用Node/JavaScript开发的功能和页面
- 分布在多个不同服务器上的架构——支持浏览器和自定义客户端软件
- 在多个服务器上运行的大型软件堆栈中的强安全知识
- Ab
查看英文原文
About Backblaze
Backblaze provides reliable, high-availability cloud storage trusted by consumers, SMBs, enterprises, and developers in over 150 countries. Backblaze B2 Cloud Storage supports data-intensive workloads including backup, media, analytics, and modern AI pipelines. Our teams focus on building secure, durable, scalable systems with a strong emphasis on application security from day one and protecting customers to keep them safe.
But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us.
About the Role
We are seeking an Application Security Engineer to improve application security across the software used to enable Backblaze B2 Cloud Storage and Computer Backup. The primary role is to build security into how the product is used, how data is stored and how customers can use it. This role will require development skills and application security knowledge to build security into the product and new features. Leveraging AI is key.
This is a hands-on role that requires application development knowledge. This role is expected to know and use the latest AI to help with both development and security. The primary requirements include; development in common web languages, application security and AI tool usage.
- Leverage AI tools and software for
- Building new and maintaining existing software security features
- Meeting evolving software security needs in existing software
- Developing new components as needed
- Perform security assessments and code reviews on internal and external customer-facing applications
- Work closely with engineers to remediate security vulnerabilities using AI tools
- Develop security automation and tooling to improve security
- Support bug bounty program and vulnerability handling
- Investigate newly reported vulnerabilities
- Determine ways to remediate them
- Provide guidance to engineering based on known vulnerabilities found in existing applications
- Understanding cryptography and secure authentication
- Knowledge of cloud environments and security they provide
·
- Support and develop on large software stack using
- Apache Tomcat running across a large number of servers
- JavaServer Pages (JSP) containing older features
- Node/JavaScript developed features and pages
- An architecture split among many different servers – supporting browsers and custom client software
- Strong security knowledge across large software stacks running on multiple servers
- Ability to reach out and learn about technologies or implementations as necessary
The Right Fit:
- Application Development and Security knowledge
- AI knowledge and experience using it for development & security
- Understanding of: AI Frameworks and tooling, core web security, common web security flaws, coding agents
- Strong understanding of OWASP Top 10 vulnerabilities
- Experience with security testing tools such as:
- SAST / DAST scanners
- Fuzzing tools
- Vulnerability scanners
- Familiar with web technologies: HTTP, REST APIs, etc.
- Experience with Web Applications, Cloud Systems and Linux Environments
- Determining how new and old security needs can leverage AI workflows and integrations to improve them
- AI Coding tools such as Gemini, Claude Code, ChatGPT, Cursor or others
- Experience with programming languages such as: Java, JSP, JavaScript, TypeScript, Go, Python and C/C++
Why Backblaze
- Build secure software used by companies worldwide
- Work at the intersection of AI, data, and cloud storage
- Collaborate with experienced engineering, security, product, and QA teams
- Competitive compensation and benefits
- Remote-first culture supporting work-life balance
At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here.
At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer.
To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.
#LATAM