Senior / Staff Security Engineer, Red Team

About Radar Radar https://radar.com is the global leader in geolocation, with geofencing SDKs, maps APIs, and AI-enabled solutions for marketing, fraud, and operations teams. Why is Radar the best place to work? - We're trusted by some of the world's best companies, from high-growth startups to the Fortune 500. - We have incredible scale: We're processing over 1 billion API calls per day from hundreds of millions of devices. - We're well-resourced, and we've raised $85.5M from world-class investors, including Accel and Insight Partners. - We have a high-performance culture, with ambitious and entrepreneurial teammates in every role. - We recently moved into an amazing new office in Flatiron, Manhattan, NYC. - We were recently named a top 10 best place to work in NYC by Crain's. Despite our growth and scale, we're still just getting started. That's where you come in. About the role We're looking for Red Team Security Engineers. As a geolocation and compliance company, Application Security Engineers at Radar focus on applications built on our mobile & web SDKs and server side APIs. Our Protect product enforces precise jurisdictional inclusion / exclusion geofences for regulated gaming use cases. As new threat patterns are continually emerging, this is a key role that contributes to keeping our solution one step ahead. How we work: Most of our engineering team are former technical co-founders or former Radar interns from schools like Waterloo and CMU. Most engineers at Radar fit one of two molds, technically: either Staff level expertise in one stack, or "Multi-Stack" at any level. We say "Multi-Stack" because "Full-Stack" has the connotation of "Frontend and Backend", but Radar Engineers might also work on Mobile or Data engineering. Not that you need to be an expert in all of those, but a desire to learn, jump around to different stacks, and get things done is the important part. We care a lot about shipping fast and talking to customers. We're committed to our product vision of full-stack location infrastructure, but we also know that customer feedback is a treasure map to gold. Even though Slack is the brain of our company, working together in-person in our NYC HQ is the fastest way for us to get things done. We meet on Mondays to plan out work for the week in small groups and use Linear for planning. To us, a week is a long time, and we expect to ship big things every week. The stack: Mobile SDKs are Objective-C, Swift, Kotlin, React Native, Flutter and more, the frontend is React, the backend is TypeScript and Rust. Everything is deployed to AWS. We sponsor OpenStreetMaps, MapLibre, and OpenAddresses. The hiring process: After a call with our Technical Recruiter, you'll do several technical Zoom calls with members of our engineering team: code screen, coding round, and system design round. If those go well we'll invite you to our NYC HQ for a final round interview. You'll meet one of our co-founders, someone from outside engineering, and meet more people from Radar. We'll go into more depth about how we work to see if there is a match. What you’ll do: - Attempt to circumvent Radar security & compliance checks through penetration tests against Radar mobile & web SDKs, desktop apps and server side APIs. - Embody our "Walk a mile" value by walking around to QA and debug the Radar SDK. - Run our Hackerone bug bounty program. - Talk to Radar customers and prospects, hear their feedback, incorporate it into your work and make them successful. You should: - Have experience working on mobile penetration testing. - Have experience working in regulated industries where motivated threat actors are a reality. - Are interested in talking to customers or prospects and making them successful. Bonus points if you: - Are a former technical co-founder. - Are a former compliance tester for regulated gaming apps. You’ll work with: - Nick Patrick https://www.linkedin.com/in/nicholaspatrick/, Co-Founder and CEO - Tim Julien https://www.linkedin.