Senior Security Software Engineer

About Rocket Lawyer   We believe everyone deserves access to affordable and simple legal services. Founded in 2008, Rocket Lawyer is the largest and most widely used online legal service platform in the world. With offices in North America, South America, and Europe, Rocket Lawyer has helped over 30 million people create over 50 million legal documents, and get their legal questions answered. We are in a unique position to enhance and expand the Rocket Lawyer platform to a scale never seen before in the company’s history, to capture audiences worldwide. We are expanding our team to take on this challenge!

About the Role

Rocket Lawyer is seeking an experienced, passionate senior security software engineer to join the team and help to ensure security of the RocketLawyer platform and our customer’s data. In this role, you will spearhead efforts to patch and remediate software and code vulnerabilities. You will work in an agile, cross-functional environment, collaborating with other engineering and product teams to deploy security fixes identified by SAST, SCA, runtime security tools, and penetration testing. Additionally as RocketLawyer continues its effort on Rocket Copilot, our new AI assistant launched in December 2023, you will work with product and engineering teams to ensure that the product is built and coded in a secure manner to mitigate the various threat vectors that AI poses.

We value a fun, collaborative, team-oriented work environment, where we celebrate our accomplishments. 

Responsibilities

• Evaluate security findings from various Application Security tools such as SAST, SCA, and runtime security technologies along with penetration testing reports and user reported vulnerabilities
• Perform on-going security testing and code review to improve software security
• Develop remediation plans based on the vulnerabilities identified and work to resolve these vulnerabilities, looping in other engineering teams as needed
• Troubleshoot and debug issues that arise
• Collaborate with the Cloud infrastructure team to ensure any security fixes are added into our automation processes for future rollouts
• Provide engineering designs for new software solutions to help mitigate security vulnerabilities
• Evaluate AI-assisted technologies for potential efficiencies in more quickly patching software packages and code vulnerabilities
• Provide guidance to team when developing AI functionality to ensure it is being designed securely
• Keep up-to-date with industry trends around security for generative AI and machine learning

Requirements

• Proven work experience as a software security engineer
…