Staff Security Engineer

Company: Carta
Location: New York
Posted on: February 25, 2021

Job Description:

At Carta we create owners and make private markets liquid.-- We live in a world where some people live on the equity stack and enjoy exponential wealth growth and preferential tax treatment; others live on the debt stack and may work their entire lives for a company and retire only with the cash they've managed to save from their paychecks. Our contribution to solving the wealth inequality problem is moving people from the debt stack (payroll) to the equity stack. By making it as easy to issue equity to employees as it is to put them on payroll, we can create more owners.-- At Carta, we are helpful, transparent, fair, and kind. We are relentless executors, unconventional thinkers, and masters of our craft.-- The Team You'll Work With This role is on the Security Platform team within Security. You will be working with the team to take on projects which gather results from many sources, automatically build security into our product, and enable teams to secure themselves. Our risk models put teams in charge of owning risk, making us a trusted partner and reporter. To complete this mission we need people who are passionate about automation and security - half devops and half security professional. We believe in creating teams not rockstars, progress with a path to perfection, and creating an environment that fosters research. We measure success not by how many bugs you find or tasks you complete, but by how much risk you reduce in the organization by enabling teams to do those things and automating the rest. We get to work in an environment that uses infrastructure-as-code, Kubernetes, role-based access, and with engineers who care about the integrity and security of our data. The Problems You'll Solve-- Some of the problems you'll help us solve are:--

• How do you build a program that ties application security, container security, and cloud security together instead of treating them as separate specialities?
• How do we change the application framework to make security the easiest path?
• What techniques and games will enable development teams to threat model their products?
• What tools and information can we provide to ensure developers can effectively peer review code themselves?
• How do you encourage developers to continuously think about security using gamification and giving them results where they live - in the pipeline? The Impact You'll Have With the power to change the product, the pipeline, and our developers on-boarding, you'll be able to not only help us continue our security ownership program, you'll also have the chance to build something new using your research. We are becoming the partner of engineering releasing quality software and we need curious minds to help us keep paving the way. About You Roll-up-your sleeves, "swiss army knife" individual who is able to:
  • Find non-standard ways to solve interesting problems
  • Speak to risks around application, container, or cloud security vulnerabilities, remediations, and preventions
  • Understand Threat Modeling and general software development practices, the associated risks, and the components of a modern product security program
  • Work with cloud networking (e.g. AWS VPC, subnetting, etc)
  • Secure products built using containerization (specifically, Docker and Kubernetes) To learn more, here is what one of our investors wrote about leading our Series F. Carta is a Series F-- company and is backed by top-tier VCs like Andreessen Horowitz, Lightspeed Venture Partners, Meritech Capital, and more. We are an equal opportunity employer and are committed to providing a positive interview experience for every candidate. If--accommodations--due to a disability or medical condition are needed, connect with us via email at recruiting@carta.com .--As a company, we value fairness, helpfulness, transparency, leadership and build our teams around these values. Check out our-- careers page to get to know us better as you think about your next step at Carta. Please read about our candidate privacy policy--here . -- U.S. Equal Opportunity Employment Information (Completion is voluntary) Individuals seeking employment at Carta are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. You are being given the opportunity to provide the following information in order to help us comply with federal and state Equal Employment Opportunity/Affirmative Action record keeping, reporting, and other legal requirements. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file. Gender Please select Are you Hispanic/Latino? Please select Race & Ethnicity Definitions If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows: A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability. A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service. An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense. An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985. Veteran Status Please select Form CC-305 OMB Control Number 1250-0005 Expires 1/31/2020 Voluntary Self-Identification of DisabilityWhy are you being asked to complete this form? Because we do business with the government, we must reach out to, hire, and provide equal opportunity to qualified people with disabilities 1 . To help us measure how well we are doing, we are asking you to tell us if you have a disability or if you ever had a disability. Completing this form is voluntary, but we hope that you will choose to fill it out. If you are applying for a job, any answer you give will be kept private and will not be used against you in any way. If you already work for us, your answer will not be used against you in any way. Because a person may become disabled at any time, we are required to ask all of our employees to update their information every five years. You may voluntarily self-identify as having a disability on this form without fear of any punishment because you did not identify as having a disability earlier. How do I know if I have a disability? You are considered to have a disability if you have a physical or mental impairment or medical condition that substantially limits a major life activity, or if you have a history or record of such an impairment or medical condition. Disabilities include, but are not limited to:
    • Blindness
    • Deafness
    • Cancer
    • Diabetes
    • Epilepsy
    • Autism
    • Cerebral palsy
    • HIV/AIDS
    • Schizophrenia
    • Muscular dystrophy
    • Bipolar disorder
    • Major depression
    • Multiple sclerosis (MS)
    • Missing limbs or partially missing limbs
    • Post-traumatic stress disorder (PTSD)
    • Obsessive compulsive disorder
    • Impairments requiring the use of a wheelchair
    • Intellectual disability (previously called mental retardation) Disability Status Please select Reasonable Accommodation Notice Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. 1 Section 503 of the Rehabilitation Act of 1973, as amended. For more information about this form or the equal employment obligations of Federal contractors, visit the U.S. Department of Labor's Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp . PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Keywords: Carta, New York , Staff Security Engineer, Engineering , New York, New York