Sr. Security engineer (ruby on rails experience required)
1 day ago be among the first 25 applicants
aha! Is the world's #1 product development software. We help more than 1 million product builders go from discovery to delivery and bring their strategy to life. Our suite of tools includes aha! Roadmaps, aha! Discovery, aha! Ideas, aha! Whiteboards, aha! Knowledge, aha! Teamwork, and aha! Develop. The business is self-funded, profitable, and 100% remote. We are recognized as one of the best fully remote companies to work for and have given over $1m to people in need through aha! Cares. Learn more at www.aha.io.
our team
the aha! Engineering team is a midsized, fully remote group that is highly productive. We are centered around north american time zones so we can collaborate during the workday.
* we help each other grow: we each bring unique skills to the table and want our teammates to feel valued from the start. Our onboarding program exposes new hires to the codebase and lets them contribute right away.
* we move quickly: we ship code multiple times a day. We believe in getting valuable features in front of customers and iteratively improving as we learn what works and what does not.
* we value product over process: we want the team to have the time and focus needed to solve complex challenges. We minimize overhead by setting clear goals and avoiding heavyweight processes and excessive meetings.
* we share knowledge freely: we share our learnings with one another and with the developer community. Our engineering blog demonstrates how we tackle interesting challenges at aha!
* we enjoy: we like what we do. And we want you to love your team and your job too. Learn more about the responsive method, our company values, and the generous benefits we offer.
our technology
our web application is a single-instance, multitenant ruby on rails monolith supported by postgres, redis, and memcached. We also run a node.js webserver to support collaborative editing and real-time updates. Our application is hosted on amazon web services using ecs for reproducibility and scalability. We use react on the front end for rich client-side experiences, including our fully collaborative text editor and slide presentation editor. We balance the strengths of rails and react to deliver a lovable product suite. We solve problems in front of us rather than prematurely optimizing for issues that might never materialize.
we do most of our planning and collaboration in aha! Roadmaps and use aha! Develop so engineers can leverage those features. We use slack and zoom for communication.
your experience
most features involve writing significant ruby on rails code in a rails codebase. You will perform security code reviews and should have experience reviewing code for security, compliance, or functional validation. You should have strong problem-solving abilities and experience delivering important functionality for a cloud-based product.
skills
* four+ years of experience working in ruby on rails
* experience with code reviews for security or functional validation in ruby on rails
* experience developing features at a high-growth saas company
* active collaborator with product teams
your work at aha!
the security team works across our full suite of products with a focus on core features such as authentication, authorization, file handling, and data segmentation. We provide security reviews and guidance for the broader engineering team across the full stack.
responsibilities
* implementing security features and improvements with the customer experience in mind
* security code reviews that go beyond what can be found with scanning tools (which we also use)
* investigating errors to identify security, resiliency, and performance improvements
* developing and sharing secure patterns internally for ongoing education
if this sounds appealing, we would love to hear from you. A real human reviews every application, so please use the form to help us learn more about you.
grow with us
everyone deserves to reach their fullest potential. We know that when we do work that matters with people we care about in a high-growth environment, we feel engaged and alive. It is why we joined aha! And how we achieve our very best.
we offer all the benefits you would expect and more, including profit sharing. The specific benefits listed below reflect what we offer u.s.-based hires, and we extend identical benefits to international teammates where possible.
* the base salary range for this role in the u.s. is between $110,000 and $190,000
* cash-based compensation also includes profit sharing, and we contribute a percentage of your total pay toward retirement
* medical, dental, and vision plans (often with premiums covered by us)
* up to 200 hours of paid time off per year
* 30 to 90 days of paid parental leave and five to 10 days of paid care and bereavement leave
* up to $1,000 annually for third-party education, plus paid time off for learning
* volunteer opportunities throughout the year
base salary and total compensation are dependent upon factors including skills and experience.
#j-18808-ljbffr