Staff Security Engineer - Application Security at 1Password

We’re looking for an experienced engineer to champion security efforts for our application platforms. As part of the Application Security team, you will be responsible for developing solutions that identify and automatically remediate application security problems across multiple tech stacks.

What we're looking for:

• Minimum of 5 years experience as a software or application security engineer
• Minimum of 1 year experience operating as a technical leader
• Demonstrated success at designing, implementing, deploying, securing critical production systems with broad company impact, in at least one of the following application security spaces: data security, cryptography, identity and access management, dependency management, application-layer security libraries, etc.
• Demonstrated effectiveness in cross-functional communication and building strong technical partnerships with internal stakeholders.
• Ability to translate technical and compliance requirements into engineering execution.
• Ability to prioritize projects and tasks, drive project execution to delivery, work through others as needed, and create roadmaps for future work.
• A strong desire to perform and grow as a security engineer and educate other engineers.

About 1Password:

We all have important information we need to manage, and protecting it should be easy. Over 150,000 businesses and millions of people log in to 1Password to unlock smart, simple access to everything they care about. Our vision is to create a safer, simpler digital future for everyone, and our culture values simplicity, honesty and a human-centric approach to solving problems. Come help us unlock peace of mind so everyone can stay safer online.

We’re looking for an experienced engineer to champion security efforts for our application platforms. As part of the Application Security team, you will be responsible for developing solutions that identify and automatically remediate application security problems across multiple tech stacks. As part of the Production Security organization, you will also be responsible for co-leading technical strategy for a Secure by Default, Low-Friction Production Platform with other engineers and engineering leaders.

1Password product and application security is discussed in much detail in the 1Password white paper; our unique security and cryptographic architecture creates novel and exciting opportunities to explore scalable vulnerability identification and remediation in this space.

This is a remote opportunity within Canada and the US.

What you can expect:

• Design, build, and maintain toolings, software, and systems for securing our application platform.
• Own the delivery and success of application security projects that span engineering teams and departments.
• Partner with security and product engineers and leaders to create technical strategy and long-term vision for securing applications.
• Work with cross-functional partners to define the best security solutions for our applications, reducing unnecessary friction, while maintaining a high degree of software development velocity.
• Provide technical leadership and mentorship to engineers, both within the team and across the security and engineering organizations.

Bonus points for:

• Experience with static application security tools, such as dependency scanners, container scanners and/or static code analysis tools.
• Experience in building or deploying novel formal methods and/or formal verification tooling.

USA-based roles only: The Annual base salary for this role is between $187,000 USD and $253,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.

Canada-based roles only: The Annual base salary for this role is between $168,000,000 CAD and $228,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.

At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set.

What we offer:

We believe in working hard, and resting hard. We’re always looking for new ways to support our team members, but here’s a glance at what we currently offer:

Health and wellbeing

> 👶 Maternity and parental leave top-up programs

> 👟 Wellness spending account

> 🏝 Generous PTO policy 

> 💖 Company-wide wellness days off scheduled throughout the year 

> 🧠 Wellness Coach membership

> 🩺 Comprehensive health coverage

 Growth and future 

> 📈 Employee stock option program for all full-time employees 

> 💸 Retirement matching program

> 💡 Training budget, 1Password University access, and learning sessions 

> 🔑 Free 1Password account (and friends and family discount!) 

Flexibility and community

> 🤝 Paid volunteer days 

> 🌎 Employee-led DEIB programs and ERGs and ECGs

> 🏠 Fully remote environment

> 🏆 Peer-to-peer recognition through Bonusly

You belong here.

1Password is proud to be an equal opportunity employer. We are committed to fostering an inclusive, diverse and equitable workplace that is built on trust, support and respect. We welcome all individuals and do not discriminate on the basis of gender identity and expression, race, ethnicity, disability, sexual orientation, colour, religion, creed, gender, national origin, age, marital status, pregnancy, sex, citizenship, education, languages spoken or veteran status. Be yourself, find your people and share the things you love.

Accommodation is available upon request at any point during our recruitment process. If you require an accommodation, please speak to your talent acquisition partner or email us at [email protected] and we’ll work to meet your needs.

Remote work is a part of our DNA. Given that our company was founded remotely in 2005, we can safely say we're experts at building remote culture. That said, remote work at 1Password does mean working from your home country. If you've got questions or concerns about this, your talent partner would be happy to address them with you.

Successful applicants will be required to complete a background check that may consist of prior employment verification, reference checks, education confirmation, criminal background, publicly available social media, credit history, or other information, as permitted by local law.

1Password uses an automated employment decision tool as a part of the recruitment process. See the latest bias audit information. A reasonable accommodation, reasonable alternative selection process, appeal or to exercise your right to opt-out of AADM may be requested by emailing [email protected] with subject 'AI accommodation request'. For additional information see our Candidate Privacy Notice.