Senior Software Engineer (Product Security)

Job Description

The Product Security org at Zendesk build and maintain tooling to detect and prevent vulnerabilities, safeguarding Zendesk’s customers, products and services. We partner with our engineers to prioritize security during the entire software development process and provide tools and programs to do so including, but not limited to, a mature bug bounty program, Security Champions program, security reviews, static/dynamic testing tooling and vulnerability management.

We are looking for an experienced Senior Software engineer to join our Product Security team to automate and scale up our tooling, and make it easier for Zendesk’s software engineers to build secure products.Â

At Zendesk Security we believe that security is everyone’s responsibility. When our customers or employees face options, we strive to make the secure options the easiest way of achieving their goals.

What you’ll do as a Senior Software Engineer (Product Security)

• Evaluate, implement and operationalise security tooling as needed.

• Automate and integrate security tooling into CI/CD pipelines.

• Use your software engineering skills and experience in ensuring our tools and processes balance security with productivity.

• Secure internal customer-facing applications and infrastructure.

• Perform threat modeling and review software design in partnership with Zendesk Engineering.

• Help our engineers better understand their security posture by delivering actionable data on their security risks and vulnerabilities.

• Work in a team-orientated, fast-paced, global, and flexible environment.

What you bring to the role

• Prior experience in a backend or full-stack application engineering role.

• Proven understanding of web application development and excellent knowledge of at least 1 server-side language, with a preference for Ruby.

• You can explain security considerations well to others and just as important, actively listen to others, ensuring a good discussion.

• A team-first, collaborative approach.

• Experience with agile development processes, working in a fast-paced environment with continuous integration and deployment.

• Excellent written and verbal communication skills.

• Excellent problem-solving skills and motivation to learn and upskill regularly.

Nice to haves

• Any application or infrastructure security experience is a plus.Â

• Experience operating in and/or securing large Amazon Web Service deployments.

• Experience maintaining tooling to be used by other engineering teams.

• Experience with API security, and/or understanding network traffic and TCP/IP application layer.

• Experience with building or maintaining tools to operate within a CI/CD environment.

Our awesome team

We are a global security team with members working around the world. Having team members that come from different cultures and backgrounds gives us a diversity of opinions and experience, enabling us to see problems from many different perspectives and design the best solutions. Some of us enjoy gardening and homebrewing, others play video games or prefer long hikes in nature, but we would really like to hear what you are passionate about - aside from security, of course!

We will be there to support your career development and chart a course for your future success at Zendesk. We try to empower our team members to take responsibility, and support them when they need help. The goal is to always be growing, as you will always be faced with new challenges and new opportunities to learn. Our Product Security team members are always learning and growing their capabilities and skill sets.

Please note that Zendesk can only hire candidates who are physically located and plan to work from Karnataka or Maharashtra. Please refer to the location posted on the requisition for where this role is based.

Hybrid: In this role, our hybrid experience is designed at the team level to give you a rich onsite experience packed with connection, collaboration, learning, and celebration - while also giving you flexibility to work remotely for part of the week. This role must attend our local office for part of the week. The specific in-office schedule is to be determined by the hiring manager.

The intelligent heart of customer experience

Zendesk software was built to bring a sense of calm to the chaotic world of customer service. Today we power billions of conversations with brands you know and love.

Zendesk believes in offering our people a fulfilling and inclusive experience. Our hybrid way of working, enables us to purposefully come together in person, at one of our many Zendesk offices around the world, to connect, collaborate and learn whilst also giving our people the flexibility to work remotely for part of the week.

Zendesk is an equal opportunity employer, and we’re proud of our ongoing efforts to foster global diversity, equity, & inclusion in the workplace. Individuals seeking employment and employees at Zendesk are considered without regard to race, color, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, disability, military or veteran status, or any other characteristic protected by applicable law. We are an AA/EEO/Veterans/Disabled employer. If you are based in the United States and would like more information about your EEO rights under the law, please click here .

Zendesk endeavors to make reasonable accommodations for applicants with disabilities and disabled veterans pursuant to applicable federal and state law. If you are an individual with a disability and require a reasonable accommodation to submit this application, complete any pre-employment testing, or otherwise participate in the employee selection process, please send an e-mail to peopleandplaces@zendesk.com with your specific accommodation request.