The Knot Worldwide · 8 hours ago
Senior Security Engineer
New York City, New York, United States
Full-time
Hybrid
Mid, Senior Level
3+ years expThe Knot Worldwide is a company that champions celebration and supports its employees in meaningful moments. They are seeking a highly skilled Senior Security Engineer to enhance application and infrastructure security, build internal tooling, and automate threat detection processes while collaborating with global product and engineering teams.
LifestyleLocal AdvertisingMarketplaceMedia and Entertainment
Responsibilities
Conduct threat modeling, code reviews, and penetration testing for in-house applications
Integrate static (SAST), dynamic (DAST), and software composition analysis (SCA) tools into CI/CD pipelines
Provide secure design and coding guidance to development teams (DevSecOps support).Develop and maintain secure coding standards and best practices
Work with development teams across the globe to implement secure coding best practices
Analyze and secure web applications from both client-side (e.g., React, Angular) and server-side (e.g., Node.js, Python, Java, .NET) threats
Make design and implement security features (in QA environments) and controls into enterprise applications and APIs
Develop internal security tools and dashboards using modern front-end and back-end frameworks
Collaborate with DevOps and Cloud teams to secure cloud-native workloads (AWS, Azure, or GCP)
Automate detection and remediation of misconfigurations using Infrastructure as Code (IaC) and security orchestration
Monitor and respond to vulnerabilities and threats in deployed applications and containers
Build or integrate with SIEM/SOAR systems to monitor applications for anomalies and abuse
Contribute to the design of automated response playbooks for web application and API threats
Participate in incident response efforts involving application-layer or code-related incidents
Establish a dashboard in the SIEM to maintain dynamic metrics on threat blocking
Log analysis and forensics
Coordinate with development teams to address active incidents and application incidents
Qualification
Required
Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent experience
3–7+ years of experience in full-stack software development
2+ years of experience in application or infrastructure security engineering
Proficiency in at least one modern front-end framework (e.g., React, Angular, Vue.js)
Experience with back-end development in languages such as Python, Node.js, Java, or .NET
Familiarity with OWASP Top 10, secure design principles, and threat modeling
Hands-on experience with CI/CD tools (GitHub Actions, Jenkins, GitLab CI) and securing DevOps pipelines
Experience with container security (Docker, Kubernetes) and IaC tools (Terraform, CloudFormation)
Solid knowledge of authentication standards (OAuth2, SAML, JWT) and session management
Preferred
Experience with penetration testing or ethical hacking (OSCP, CEH, or similar a plus)
Certifications such as CSSLP, CISSP, or GIAC GWAPT are a plus
Familiarity with security platforms such as Snyk, Veracode, SonarQube, Burp Suite, etc
Experience integrating with enterprise IAM and zero trust architectures
Familiarity with agile and DevSecOps methodologies
Contributions to open-source security projects or developer communities
Benefits
Flexible vacation
Generous parental leave
Mental wellbeing
Physical health
Financial planning
Engaging perks and discounts
Company
The Knot Worldwide
The Knot Worldwide helps couples navigate and enjoy life’s biggest moments together.
1001-5000 employees
H1B Sponsorship
The Knot Worldwide has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (6)
2024 (3)
2023 (4)
2022 (3)
2021 (6)
2020 (5)
Funding
Current Stage
Public CompanyTotal Funding
$19.6MKey Investors
QVCHummer Winblad Venture PartnersAOL
2018-01-01Private Equity
2011-06-27IPO
1999-04-15Series C· $15M
Leadership Team
Raina Moskowitz
Chief Executive Officer
Michael Pickrum
Chief Financial Officer
Recent News
2026-01-13
Company data provided by crunchbase