About the role
FloQast is a fast-growing SaaS company innovating how accounting teams close the books faster and more accurately. Our mission is to take manual, error-prone work out of financial close and give teams the tools they need to collaborate, automate, and scale. We're trusted by thousands of accounting teams, including some of the world’s most recognizable brands. We are seeking a highly skilled Staff Application Security Engineer to serve as a Subject Matter Expert and expert technical contributor within our security team. This role is focused on driving the hands-on integration of the "Security by Design" philosophy across our product suite, ensuring our applications are resilient against modern threats. You will leverage deep technical expertise in software exploitation and defensive architecture to set secure standards, lead complex security projects, and mentor development teams on secure coding practices. The ideal candidate contributes significantly to technical strategy and architecture, focusing on building sustainable solutions that prevent security issues at scale. \n What You’ll Do Engineer, implement and monitor security measures for the protection of computer systems, networks, and information Prepare, maintain and document standard operating procedures and protocols Configure and troubleshoot security infrastructure systems Develop and maintain technical solutions and security tools to help mitigate security vulnerabilities and automate repeatable tasks Work closely with technical leads to collate, drive and deliver on a technical strategy and roadmap that encompasses product, cloud, and enterprise security Assist with security reviews, threat modeling, code reviews Assist with our vulnerability management efforts across functional teams (enterprise and application security) to ensure we meet our SLAs and help mitigate risks Be an advocate for security best practices and the point of contact throughout the company Any other tasks that may be assigned to help the company meet its goals What You’ll Bring 8+ years of experience with auditing web applications. 3+ years using at least one high level programming language e.g. Node.js, Python, Go, Java, Ruby. Experience utilizing web application security scanning software and penetration testing tools e.g. Burp Suite, ZAP, Nessus, Qualys, Metasploit, CANVAS, Nuclei, Cobalt Strike. Experience and desire conducting Security training for developers and the security team. Experience performing threat modeling and secure design review in order to assess the security implications and
