Software Engineer

Description:

As a Software Engineer on the Security team at Yelp, you will contribute to full stack projects while collaborating with our engineering teams to build safe tools, libraries, and features that protect our users and infrastructure. You’ll identify and fix vulnerabilities in our applications and services, and partner with external researchers through our public bug bounty program to continuously improve our security posture.

This opportunity is fully remote and does not require you to be located in any particular area in Canada. We welcome applicants from throughout Canada. We’d love to have you apply, even if you don’t feel you meet every single requirement in this posting. At Yelp, we’re looking for great people, not just those who simply check off all the boxes.

What you'll do:

• Collaborate with cross-functional engineering teams (mobile, frontend, backend) to perform threat modeling, conduct security reviews, and design secure libraries that enhance the security of Yelp’s applications and services.
• Develop and deploy services for login and account security specific to Yelp’s website and mobile apps.
• Support security incident response and contribute to the team’s operational activities, including triaging bug bounty submissions and vulnerability reports from internal security tools.
• Build automated solutions to detect and prevent potential security threats within Yelp’s application and services.
• Promote security best practices and policies to be incorporated within software development life cycle.
• Be a team player who lives the Yelp Values and thrives in a diverse and inclusive work culture.

What it takes to succeed:

• Previous education or equivalent experience in Cybersecurity, or a related field.
• Full Stack software development background with an interest in application security.
• Understanding of web application security, mobile security, APIs, and cloud security.
• Command of your favorite modern programming language(s) -Python, Java, Javascript - React, Swift and/or Objective-C.
• Security research and pen testing experience are assets.