About the job

Kindred is a robotics and artificial intelligence (AI) company that develops robots to solve real-world problems. Since 2014, its mission is to enhance the lives of human workers with the power of AI robotics. Our cutting-edge technology is the foundation of a number of proprietary platforms, including CORE with AutoGrasp™, developed to operate robots autonomously in dynamic environments. Our team of scientists, engineers and business operators have set a new standard for reinforcement learning for robots. We are co-located in San Francisco and Toronto and are part of the UK-based Ocado Group plc.

The company is growing rapidly and we are searching for an individual for a highly-impactful role, has great attention to detail, is a proactive self-starter and interacts easily with all levels of a high-performance team.

About this role:

Cybersecurity is not optional for the platform business. A single security incident can result in a complete loss of credibility and customers. As we grow, we need to make sure that security principles and practices are deeply embedded in our engineering culture and that we create necessary feedback loops that keep us continuously improving in this area.

We are creating a centralised team of AppSec Developers with different skills sets and levels of experience, providing services to different streams. AppSec Developers will be in all the development centres and will collaborate as a team.

As an AppSec Developer, you would offer expertise and guidance to software engineering teams and help them integrate security practices in their SDLC.

This role requires you to work from the office at least 2 days a week, once it is safe to do so.

What you’ll do:

Working with teams to provide them with help and guidance on addressing cybersecurity threats
Conducting threat modelling sessions and training teams on how to run them
Participating in security issue management processes
Assisting engineering teams with organising penetration testing by dedicated pentest partners
Educating and supporting teams perform their security code reviews
Oversee in-stream use of vulnerability detection and reporting tools
Auditing, providing teams with feedback and guidance about their security activities (threat modelling, code reviews, SDLC practices)
Keep updated the SDLC security guidelines
Research security best practices in other organisations
Keeping abreast of new vulnerabilities and attack vectors, and associated countermeasures
Contributing to the centralised AppSec tooling
Integrations with the security issue management system
Security monitoring and alerting
Security reporting
Static and dynamic analysis

What you’ll bring:

More than 2 years experience as an Application Security Developer
Capable of working in a proactive way in an autonomous environment while being part of an Application Security team
Demonstrable programming ability with an in-depth understanding of underpinning techniques
Experience in the full Software Development life-cycle from design to deployment
Ability to work in a geographically dispersed team
Strong communication skills and ability to influence engineering behaviours
Interest in continuous learning

Bonus

Knowledge of backend and frontend web application vulnerabilities
Knowledge of cloud environments
Knowledge of Agile methodologies
Proven ability to tackle challenging projects

Kindred, Part of Ocado Group

New Jobs

Application Security Developer