EasyPost

EasyPost

EasyPost provides a comprehensive shipping API that enables online shippers to manage postage purchasing, package tracking, rate comparison, address verification, and shipment insurance, streamlining logistics processes through a single integration.

Air Freight & Logistics
51-250
Founded 2012
$3M raised

Description

  • Design, build, and maintain scalable security systems and infrastructure aligned with business goals.
  • Partner with cross-functional teams to integrate security and privacy controls throughout the product lifecycle.
  • Build automated systems and programs that scale security coverage efficiently.
  • Champion shift-left DevSecOps practices using Infrastructure-as-Code and CI/CD design patterns.
  • Architect and build customer-facing security features that support business growth.
  • Maintain high-fidelity alerting and notification infrastructure for internal staff and customers.
  • Create self-service documentation, training materials, and knowledge base resources for developers.
  • Collaborate with M&A entities to assess risks, integrate products, and unify environments under company security standards.

Requirements

  • Bachelor’s degree in computer science, management information systems, or a related field.
  • 5+ years of related experience, or a master’s degree with 3+ years of related experience, or equivalent work experience.
  • Ability to code proficiently in at least two of the following languages: Python, Ruby, Go, and Rust.
  • Experience designing systems that are simple, maintainable, scalable, and resilient.
  • Experience securing large-scale web applications and/or APIs, including security design reviews, vulnerability assessments, and testing strategies for logic flaws.
  • Ability to understand and communicate threat modeling and risk management to technical and non-technical stakeholders.
  • Proven experience building strong partnerships with Engineering and Product teams.
  • Working knowledge of compliance and regulatory frameworks such as SOC2, ISO 27001, SOX/ITGC, HIPAA, GDPR, and CCPA.
  • Experience assessing risk and selecting objectives during the vendor management lifecycle for software, hardware, cloud, and SaaS vendors.
  • Experience with mixed computing environments, including Linux, Windows, Mac OS, and mobile devices.
  • Experience migrating applications and services to public cloud providers such as AWS, GCP, or Azure.
  • Must be authorized and based in the United States.

Benefits

  • Competitive compensation package with a salary range of $150,000 to $173,000 per year.
  • Equity package.
  • Comprehensive medical, dental, vision, and life insurance.
  • Monthly $50 work-from-home stipend.
  • Flexible work schedule and paid time off.
  • Supportive, collaborative team culture.
  • Unlimited growth opportunities.
  • Opportunity to make a major impact at a hyper-growth company serving millions of package shipments per day.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Application Security Tester & AI Red Team Subject Matter Expert

Evolve Security Academy 11-50 Internet Software & Services

Evolve Security is seeking a senior offensive security specialist to lead complex web, API, and AI red team engagements while defining the firm’s testing methodology for LLM-enabled and agentic systems.

Bash GraphQL JavaScript JWT Metasploit Nmap OpenID Connect Penetration Testing Postman PowerShell Python REST API SAML SPA TypeScript
23 hours, 46 minutes ago

Senior Application Security Engineer

CookUnity 251-1K Hotels, Restaurants & Leisure

CookUnity is hiring a founding Application Security team member to help secure its engineering organization’s applications and build security into the software lifecycle.

Agile AWS Azure Burp Suite CI/CD DevSecOps Docker GCP Java Kotlin Kubernetes OAuth OpenID Connect OWASP Penetration Testing SAML TypeScript
1 day, 21 hours ago

Senior Application Security Engineer

Onit 251-1K IT Services

Onit is hiring a Senior Application Security Engineer in Pune to secure its SaaS applications, APIs, and AI-driven platform through hands-on security architecture, risk assessment, and vulnerability management.

AWS Azure CI/CD DevSecOps GCP GraphQL OAuth OpenID Connect REST API SAML SonarQube System Design
3 days, 4 hours ago

Product Security Intern

Funding Societies 251-1K Capital Markets

Funding Societies | Modalku is seeking a Product Security Intern to help strengthen secure software development and security automation across its engineering environment using Generative AI and modern security tooling.

Bash CI/CD Cybersecurity Encryption Generative AI Git Go JavaScript LLM Penetration Testing Python
3 days, 20 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers