Senior Software Engineer, Infrastructure Security

Who you are

You have 5+ years of experience in software engineering with a focus on security — you've designed and implemented secure systems that protect infrastructure and applications from vulnerabilities. Your expertise in AWS and Java allows you to build robust security frameworks that empower engineering teams to operate safely and efficiently.

You are a proactive problem solver who understands the importance of security in software development — you have experience in creating preventative controls and have worked on projects that required a deep understanding of security risks and mitigation strategies. You thrive in collaborative environments, partnering with cross-functional teams to ensure security is integrated into every aspect of the development process.

You are passionate about building secure-by-default solutions — you have a track record of developing libraries and platforms that not only meet security standards but also enhance the overall user experience. Your ability to communicate complex security concepts to non-technical stakeholders makes you an effective advocate for security best practices.

Desirable

Experience with security frameworks and tools such as OWASP, Burp Suite, or similar is a plus. Familiarity with vulnerability management and remediation processes will help you excel in this role.

What you'll do

As a Senior Software Engineer on the Infrastructure Security team, you will design, build, and maintain secure frameworks and libraries that eliminate classes of vulnerabilities. You will engineer core security services, including access control frameworks and secrets management infrastructure, ensuring that Asana's products are secure by default.

You will develop and own the platform for vulnerability remediation, creating tooling that empowers engineering teams to address risks efficiently. Your role will involve collaborating with product and infrastructure teams to architect and implement security solutions that align with Asana's mission of enabling teams to work together effortlessly.

You will be responsible for conducting security assessments and audits, identifying potential risks, and implementing strategies to mitigate them. Your contributions will directly impact the security posture of Asana, allowing the company to maintain its commitment to providing a secure environment for its users.

What we offer

Asana provides a supportive work environment that values collaboration and innovation. You will have the opportunity to work with a diverse team of professionals who are dedicated to building technology that drives positive change in the world. The role is based in our San Francisco office with a hybrid work schedule, allowing for flexibility in your work environment.

We encourage you to apply even if your experience doesn't match every requirement — we believe that diverse teams build better products. Join us in our mission to empower teams to achieve their goals while ensuring the security of our infrastructure and products.