Software Engineer for Application Security

At Pandora, we're a unique collection of engineers, musicians, designers, marketers, and world-class sellers with a common goal: to enrich lives by delivering effortless personalized music enjoyment and discovery. People—the listeners, the music makers, and our employees—are at the center of our purpose and everything we do. Actually, employees at Pandora are a lot like the service itself: bright, eclectic, and innovative.

Our Application Security team has a great opportunity for a generalist engineer who loves to work on security features or a security engineer who loves to code. You should have a track record of building and/or securing robust, scalable, and multithreaded applications. The ideal candidate may not be an expert at all aspects of our core technology but they will be excited to have the opportunity to address issues in everything ranging across the domains of devops, cloud services, backend services, webtech, mobiletech, and consumer devices.

You have a strong understanding of web and mobile security issues, patterns, and anti-patterns. You have a desire to assess (break), empower (build), socialize (evangelize), and educate (help others build). You are comfortable contributing throughout the entire SDLC. You understand why systems need to be secure, but have a pragmatic approach to driving security initiatives. You place a high value on automated tasks and testing.

**Requirements:** * Identify and address OWASP top 10 vulnerabilities * Manual and automated application assessment * Works well at scale * Comfortable with any technology stack * Instrumentation, metrics, automation, and testing fanatic * Approachable team player with excellent communication and interpersonal skills * Knows the current state of the application security industry **Plus Requirements:** * Familiar with cloud platforms (AWS/GCP) * Core Technologies: * Java, Python, Scala, Clojure * Objective-c, Swift, AndroidStudio * Javascript, JQuery, React, Node.js, Django, Moustache, Velocity * Linux, OSX, Jenkins, Docker, Ansible * Apache, nginx, Jetty, Tomcat * Sonarqube, BurpSuite, Nessus * Statsd, grafana, hive, hdfs