Senior Application Security Engineer

About the Role

Yelp's engineering ethos celebrates a culture built on cooperation, individuality, and innovative problem-solving. New engineers are empowered to deploy working software within their first week and receive strong support from mentors, peers, and managers to amplify their impact. The Application Security team plays a critical role in safeguarding Yelp's users, services, and applications by partnering across mobile, frontend, and backend teams to create secure-by-default frameworks as Yelp's product suite expands.

Key Responsibilities

• Collaborate with cross-disciplinary engineering teams spanning mobile, frontend, and backend to perform threat modeling and security reviews while designing secure libraries that strengthen Yelp's applications and services.
• Develop and maintain services related to login and account security specifically for Yelp's website and mobile platforms.
• Participate in security incident response activities and support operational duties including triaging bug bounty submissions and vulnerability reports generated by internal security tools.
• Create automated systems for detecting and preventing security threats within Yelp's applications and services.
• Promote and integrate security best practices and policies throughout the software development lifecycle.
• Engage as a collaborative team member who embodies Yelp's core values and thrives in a diverse and inclusive workplace culture.

Qualifications

• Background as a software generalist with a strong passion for application security.
• Multiple years of professional experience in software engineering focusing on application security.
• Deep knowledge of web application security, mobile application security, API protection, and cloud security principles.
• Familiarity with prevalent vulnerabilities such as those identified in the OWASP Top 10.
• Proficiency in modern programming languages including Python, Java, JavaScript (React), Swift, and/or Objective-C.
• Experience or exposure to security research and penetration testing is advantageous.
• Ability to navigate and understand unfamiliar codebases with confidence.

Benefits and Perks

• Responsibility for projects from the outset in a collaborative and dynamic team environment.
• Competitive compensation package including pension scheme and optional employee stock purchase program.
• Generous vacation policy with 25 days paid holiday increasing to 29 with tenure, plus an additional floating holiday.
• Monthly remote work expense reimbursement of €150.
• Caregiver support reimbursement of €86 monthly to assist with dependent care.
• Comprehensive private health insurance covering dental and vision care.
• Flexible working hours coupled with meeting-free Wednesdays to foster work-life balance.
• Participation in regular hackathons, bi-weekly learning groups, and allowance for productivity-related expenses to support career development.
• Opportunities to attend digital events and conferences for professional growth.
• €86 per month allocated for qualifying wellness-related expenditures.
• Quarterly team offsite events to promote team cohesion and engagement.

Additional Information

This senior engineering position requires residency within the Republic of Ireland. The company is dedicated to diversity, equality, and inclusion and welcomes applications from all qualified individuals regardless of their background or protected status categories. Recruitment is direct with the employer, and no agency submissions are accepted.