🛠 Tech Stack

💼 About This Role

You'll join a growing security team at e.l.f. Beauty, securing applications across the SDLC. You'll identify vulnerabilities, embed security into development processes, and implement automated security testing tools to protect digital products.

🎯 What You'll Do

• Perform manual and automated security assessments of web, mobile, and cloud applications
• Conduct secure code reviews, threat modeling, and risk assessments
• Implement and manage SAST, DAST, SCA, and IAST tools
• Lead incident response for application-layer security events

📋 Requirements

• 8+ years in application security, secure development, and penetration testing
• Strong understanding of web technologies (HTML, JavaScript, Python, REST APIs)
• Experience with security tools and CI/CD integration
• Knowledge of cloud environments (AWS, Azure, GCP) and their security features

✨ Nice to Have

• Industry certifications like CSSLP, GWAPT, OSCP, or CEH
• Experience with container security and CI/CD pipeline integration
• Familiarity with regulatory frameworks (SOC 2, ISO 27001, PCI DSS)

🎁 Benefits & Perks

• 🏖️ Competitive pay and benefits on day one
• 💰 Bonus eligibility (200% of target over last four years)
• 📈 Equity included in total compensation
• 🏢 Hybrid work environment (3 days in office, 2 at home)
• 🕒 Flexible workplace culture