Crunchyroll is hiring a Senior Security Engineer

Crunchyroll is hiring a Senior Security Engineer to support the evolution of our global corporate information security program. In this role, you will be responsible for designing and evolving security technologies, supporting long-range strategy, and leading cross-functional projects.

What You'll Do

• Work with a focus to level-up security at Crunchyroll.
• Implement security technology and controls.
• Respond to security incidents and coordinate response across multiple teams.
• Review, recommend, and implement security architecture standards.
• Partner with teams across the company to monitor and implement security standards.
• Support and improve processes related to the Vulnerability Management Program.
• Lead initiatives such as threat modeling with the goal of implementing the appropriate proactive security measures.
• Support the GRC and Privacy Programs as needed.
• Stay up to date on technology trends and security best practices.
• Create reports and documentation to support the security program.

What We're Looking For

• 8+ years of experience in Information Security.
• Experience as a Security Engineer that implements and maintains security solutions.
• Experience with responding to security incidents.
• Strong fundamental understanding of security best practices.
• Strong fundamental understanding of secure coding best practices.
• Strong fundamental understanding of web and mobile application security.
• Demonstrated experience maintaining effective working relationships across all levels of an organization and with a variety of external constituents.
• Ability to partner with cross-functional teams to identify product and application vulnerabilities and help drive prioritization and remediation efforts.
• Curious and want to grow in a dynamic, security-focused environment.

Nice to Have

• Security certification(s).
• Experience in environments that are consumer facing.
• Experience identifying and protecting against fraud & abuse exploits.
• Knowledge of data privacy laws and regulations, including GDPR, CCPA.
• Experience with static code analysis and open source dependency monitoring tools such as Snyk.
• Experience with dynamic assessment security testing using tools such Burp Suite or OWASP ZAP.
• Experience with Web Application Firewalls such as Cloudflare and AWS WAF.
• Experience with CI/CD tooling such as Github Actions or Jenkins.
• Experience with cloud environments such as GCP or AWS.
• Advanced experience working with TypeScript, Go, or Python.
• BS in Computer Science or a related field or have equivalent experience.

Technical Stack

• Snyk, Burp Suite, OWASP ZAP, Cloudflare
• AWS WAF, Github Actions, Jenkins
• GCP, AWS, TypeScript, Go, Python

Team & Environment

You will report to the Head of Information Security and partner across Crunchyroll's teams, including Legal, Engineering, IT, People, Workplace Experience, Trust & Safety, as well as third party contractors, and suppliers.

Benefits & Compensation

• Great compensation package including salary plus performance bonus earning potential, paid annually.
• Flexible time off policies.
• Generous medical, dental, vision, STD, LTD, and life insurance.
• Health Saving Account HSA program.
• Health care and dependent care FSA.
• 401(k) plan, with employer match.
• Employer paid commuter benefit.
• Support program for new parents.
• Pet insurance and some of our offices are pet friendly.

Work Mode

This is a hybrid role based in Dallas, TX, San Francisco, CA, or Los Angeles, CA.

We are an equal opportunity employer and value diversity at Crunchyroll. Pursuant to applicable law, we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.