The security team at Peloton has oversight into the security practices of the entire organization, instantiating security policies and best practices, as well as automation of these policies/practices where possible. The security team at Peloton is looking for a Lead Product Security Engineer to join our growing team to work across disparate teams. As a Lead Product Security Engineer, you would ensure the security of Peloton's products and services.
Perform security assessments and design reviews; make recommendations to improve security posture.
Have experience in Pen-testing, vulnerability research, and threat modeling.
Secure architecture design; provide training to security and internal development teams.
Assist in the implementation of product features like authentication, cryptography.
Have experience working on a security team performing technical security assessments on modern web applications, APIs, and mobile applications within cloud hosted environments such as AWS, GCP.
Experience integrating security into CI/CD pipelines
Familiarity with common web application testing tools for DAST, SAST, and IAST analysis such as Burp Suite, Checkmarx, Veracode, AppSpider, Coverity, BlackNetSparker
Knowledge of software security testing procedures across multiple platforms and Operating Systems.
Understanding of Agile software development methods and familiarity with enterprise productivity tools such as JIRA, confluence
Experience instituting organizational change with respect to security
Effective spoken and written communicator to multiple audiences
B.S. Computer Science in a related field, or equivalent experience
Nice to haves
Experience and familiarity with NIST, PCI, et. al. frameworks.
Familiarity with Peloton products and services is a plus
Experience with bug bounty programs
Experience with CDNs such as Fastly, Cloudflare, Cloudfront, Akamai
Experience with Android development
Founded in 2012, Peloton has transformed the at-home fitness experience by creating a bike that merges high-design with modern technology to provide access to live streaming and on demand indoor cycling classes led by elite instructors. With a state of the art studio, the best instructors and content distribution, Peloton delivers an intense high-energy workout that motivates, while positively changing the mind and body.