Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

Add office photos

Employer? Claim Account for FREE

Wayfair Technologies

Compare

2.5

based on 3 Reviews

3 Wayfair Technologies Software Engineer II Jobs

Software Engineer II, Application Security

Wayfair Technologies

2.5

based on 3 Reviews

3-6 years

Bangalore / Bengaluru

1 vacancy

Software Engineer II, Application Security

Wayfair Technologies

posted 16d ago

Job Role Insights

Key skills for the job

Medical Coding Python Logistics Penetration Testing Release Management Application Development

+ 4 more

Job Description

Candidates for this position are preferred to be based in Bangalore, India and will be expected to comply with their teams hybrid work schedule requirements.

Wayfair s Application Security Team is responsible for safeguarding the security of development and custom products and features. We engage with hundreds of developers and development teams to review and improve the security of custom developed applications, products, and interfaces. Additionally, we monitor and manage customer security and react to incidents as they arise. We design secure solutions and systems, build trusted relationships with teams across Wayfair and our customers, investigate security incidents, discover and mitigate vulnerabilities, both internal and external.

What You ll Do

Lead enterprise wide security initiatives by working closely with development teams
Strategize and collaborate with security development to build security solutions that can be used across the enterprise using Python and Java
Be the trusted security SME for the Org and liaise with development and product teams to develop & deploy secure products and features for customers, suppliers, partners, and employees
Implement Sec in DevSecOps model of operations
Conduct risk analysis, threat modeling and penetration testing of highly complex services to build secure products from ground up
Keep development teams up-to-date with secure coding practices by providing them training and the latest trends in secure development
Build runbooks and knowledge base to assist developers with secure development
Coordinate with and manage external hackers as part of Wayfair s Bug Bounty Program
Maintain, tune, and own the web application firewall (WAF)

What Youll Need

Minimum of 3 years of experience in secure application development or application security
Experience with secure application development or Secure SDLC
Hands-on scripting experience in Python
Experience securing k8s, REST and GraphQL services with deep understanding of securing micro service architectures
Experience securing any of these cloud services platforms - GCP (Preferred), AWS, Azure
Understanding of Authentication mechanisms such as SAML, JWT, OAuth etc.
Understanding of build and release management, CI/CD platforms
Experience securing any of these cloud services platforms - GCP, AWS, Azure
Understanding of Authentication mechanisms such as SAML, JWT, OAuth etc.
Cloud Security Certifications is a plus
We would love to see experience with WAF, Bug Bounty Program and Open source security tools