\nAbout Buoy Software\n\n\nOur mission is to deliver the best experience possible to as many donors of blood products (such as plasma) as possible, in as many communities as possible. We use our understanding of blood product donation and the industry’s regulations and pair them with our extensive consumer product experience to enrich the lives of our members and improve health outcomes for patients everywhere. \n\n\nIn an industry that hasn’t seen innovation in more than two decades, Buoy’s software streamlines the donation process allowing our business to promote loyalty while improving efficiency in a donation center. In turn, the increase in blood product donations improves a supply level that is at an all time low, and allows for blood-product derived biotherapies to continue to evolve, improve, and save lives for those who face life-threatening conditions (i.e. immune deficiencies and blood disorders). Without an increase in blood product donations, we are facing a worldwide health crisis that ultimately results in rationing of care without the proper resources. Buoy Software is excited to be playing more of a role in improving the state of blood products and blood product donations.\n\n\nWe’re working alongside Join Parachute ([www.joinparachute.com/](http://www.joinparachute.com/)) in the opening of small market donation centers across the country that will create local donation center careers, opportunities to donate blood products, and provide financial compensation for those donations that will have a positive economic impact in those communities. \n\n\nThe need for blood products is growing rapidly. We want to close the gap in blood product supply and demand by empowering organizations with the right tools. Buoy is the intuitive, data-driven mobile application for donors.\n\n\nAbout The Role\n\n\nWe're looking for a Security and Risk Engineer to join our team. You should be someone who is comfortable and experienced in risk management and code review. This role will work closely with specific product engineering pods, owning all security controls and documentation for assigned pods. You should have an eye for continuous improvement, risk and vulnerability management, and security compliance.\n\n\n\nWhat you’ll do:\n* Oversee vulnerability and security risk management including, but not limited to, vulnerability and risk identification/assessment, crafting mitigation proposals, tracking mitigation status, and testing and validating mitigation methods\n* Oversee security compliance activities including, but not limited to, hazard analyses, threat modeling, root cause analysis, and creating, updating, and maintaining policies and other relevant documentation\n* Manage continuous monitoring and auditing processes to detect and respond to security incidents\n* Perform code assessments to determine any impacts for Buoy’s applications\n* Responsible for defining, implementing, evaluating, and maintaining the effectiveness of security and risk controls\n* Identify current and emerging issues including security trends, vulnerabilities, and threats\n* Collaborate with team members and stakeholders on projects and audits\n* Design security controls that increase operational efficiency and reduces the likelihood of control failure\n* Perform third party security assessments\n* Educate and train staff on security best practices\n\n\n\nWho you are: \n* You have experience with threat modeling analysis such as STRIDE and Attack Tree methodologies.\n* You have experience with software as a service.\n* You are a self starter. You enjoy working in an environment where you have a lot of autonomy. You are not one to wait around to be given work, but are always looking for ways in which you can provide support for your colleagues.\n* You can adapt to change quickly and thrive in an environment where every day is different / you own a variety of tasks.\n* You are a team player. Everyone contributes within the Buoy team, and you want to help the team get the job done when needed, regardless of initial ownership.\n* You are professional in your collaboration and communication methods. You can represent Buoy and our values both internally and externally (with vendors / partners) as needed.\n\n\n\nIn the first 30 days, you will…\n* Be introduced to the team - we’ll help you start to get to know your colleagues, point of contacts for various scenarios, understanding dynamics within the broader org.\n* Learn how Buoy Software operates internally - we’ll help you get accustomed to Buoy’s process, engineering terminology, and other cultural aspects of working here.\n* Go through product demos to start to understand Buoy Software and how it works for both donors experience and donor processing.\n* Begin meeting with and getting to know your direct manager who will share various projects and goals for this role to provide guidance as you settle into the position.\n* Review existing security documentation and determine gaps or improvements.\n* Hit the ground running!\n\n\n\nIn the first 60 days, you will…\n* Understand goals for your respective pods over the next 6 - 12 months.\n* Begin implementing solutions for gaps identified and performing all duties related to continuous management of security for your pods.\n* Become more familiar with workflows and processes.\n* Become more autonomous as you work with your pods and other stakeholders.\n* Start to define timelines for various projects with your manager to help prioritize your focus and align them with the goals for this role.\n* Begin to suggest changes and improvements to the security program and/or internal processes.\n\n\n\nIn the first 90 days, you will…\n* Meet with stakeholders across the broader Buoy Software organization.\n* Become more familiar with the other departments across Buoy Software (including leadership, support, customer success, marketing, and people ops).\n\n\n\n\n\n$120,000 - $140,000 a year\n\nWhere you'll be\nWe are fully remote. We deeply believe in distributed teams at Buoy. We build projects around motivated individuals. We give our team the environment, support and trust they need to get the job done. \n\n\nWe are only considering candidates currently based in the United States at this time. \n\n\n---\nEmployment at Buoy Software is contingent upon achievement of satisfactory results on your background check and reference check and your ability to provide proof of your identity and eligibility to accept employment in the United States. \n\n#Salary and compensation\n No salary data published by company so we estimated salary based on similar jobs related to Developer, Testing, Mobile and Engineer jobs that are similar:\n\n $60,000 — $102,500/year\n
\n\n#Benefits\n 💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n
\n\n#Location\nRemote

\nContrast Security is the world’s leading provider of security technology that enables software applications to protect themselves against cyber attacks. Contrast's patented deep security instrumentation is the breakthrough technology that enables highly accurate analysis and always-on protection of an entire application portfolio, without disruptive scanning or expensive security experts. Only Contrast has intelligent agents that work actively inside applications to prevent data breaches, defeat hackers and secure the entire enterprise from development, to operations, to production.\n\nThe Software Development Engineer in Test (SDET) believes the reward for a job well done is another job. You would rather spend your time enabling engineering teams to more effectively write their own tests than write tests for them. You thrive in an environment where there is something new to learn with each major effort. \n\nImagine landing with an engineering team with a goal of improving their unit testing coverage.  Maybe they need help mocking services? Maybe they need help just refactoring a large group of tests during a system upgrade? Maybe they need help starting a load testing practice? Our teams will ask. You will research, implement and train.  When you are done with that job, a new one will await you with another of our teams.  \n\nResponsibilities\n\n\n* Work with multiple agile teams to establish automated test metric goals and achieve them. \n\n* Work with teams to set up processes, patterns and standards to increase unit test coverage\n\n* Work with teams to set up processes, patterns and standards to automate high value performance testing (benchmark, load and stress)\n\n* Work with teams to set up high value automated API tests\n\n* Working with the Ops teams to test infrastructure as code gets you a gold star\n\n* Contribute to our synthetic test infrastructure run against our production SaaS systems for real-time awareness of product uptime and functional stability.\n\n* Build and maintain expertise in several languages and their testing tool sets over time.\n\n* A passion for automation – a key team goal is to reduce daily toil through automation\n\n* Work cross-functionally within a service team and be a core contributor in every significant engineering solution that is delivered\n\n* Debug production issues across services and levels of the stack\n\n* Participate in on-call rotations, along with every member of the engineering team\n\n* Solid understanding of system design, including the operational trade-offs of various designs\n\n* Solid programming and troubleshooting skills. You may be called upon to help with systems written in Java, .NET, Ruby, Go, Python and Javascript. You won’t be expected to know everything, but we are looking for people who can dig through a codebase for debugging and commit tactical fixes opportunities.\n\n\n\n\nAbout You\n\n\n* You don't love writing code, you love writing code that test's the code.\n\n* You have 5+ years in technology with at least three in a QA Automation Role or SDET\n\n* You love to break things, and you like to share how you did it.\n\n* You’re a storyteller with compelling stories about that time you learned something new in order to solve a problem for your company, and stories about the times you helped your team mates skill up.\n\n* You have powerful stories about the failures and mistakes you’ve made and the lessons learned. You share them as cautionary tales with your team mates.\n\n* You can find your way around a database, but you are better at mocking them.\n\n* You can demonstrate familiarity with common language frameworks. Java is preferred to start, but .NET, Ruby, Go, Python and Javascript are also key to our product offering.\n\n* You have a desire to make the Internet a safer place.\n\n* You have a passion for tools, testing frameworks, methodologies and implementations. You choose them based on the the best fit for the problem at hand. \n\n* You approach problems from a product perspective, thinking through how the user will interact with what you're building.\n\n* You have strong communication skills. You ask questions, let others know when you need help, and tell others what you need. You write things down so someone else on your team can do them.\n\n* You're a problem solver. You believe the best work is the result of finding the simplest solution to complex challenges. We see simplicity as the greatest expression of intelligence and responsibility.\n\n* You see the big picture. You understand how the code you write interacts with systems and services, both internally and externally.\n\n\n\n\nWhat We Offer\n\n\n* The opportunity to work with some of the highest performing individuals in the world with the goal of establishing memories of the best part of your career ever.\n\n* Competitive compensation\n\n* Daily in-office team lunches\n\n* Meaningful stock plans\n\n* Medical, dental, and vision benefits\n\n* Flexible paid time off \n\n\n\n\nBy submitting your application, you are providing Personally Identifiable Information about yourself (cover letter, resume, references, or other employment-related information) and hereby give your consent for Contrast Security, and/ or our HR-related Service Providers, to use this information for the purpose of processing, evaluating and responding to your application for current and future career opportunities. Contrast Security is an equal opportunity employer and our team is comprised of individuals from many diverse backgrounds, lifestyles and locations. \n\n#Salary and compensation\n No salary data published by company so we estimated salary based on similar jobs related to InfoSec, Engineer, Testing, Developer, Digital Nomad, JavaScript, Java, Python, API and SaaS jobs that are similar:\n\n $70,000 — $120,000/year\n
\n\n#Benefits\n 💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n

\nAre you someone who can take a vision of really neat end-user functionality and architect an application that will turn that vision into reality? \n\nYou know that people with vision aren’t always the best at turning it into an operational reality.\n\nYou also know that people who write really good code often don’t consider the bigger picture of what they’re doing it for.\n\nYou consider yourself to be the bridge between the 2.\n\nWe are on the search for a skilled and experienced Software Architect. Your primary responsibilities will be to help create enhancements to existing products and to create new products from concept to launch as part of a cross-functional project team.\n\nYou will design, implement, and test solutions that result in compelling and easy-to-use products.\n\n In more detail, you will:\n\n\n\n* Develop software solutions by studying information needs, systems flow, data usage, and work processes; investigate problem areas; utilize agile software development techniques; and confer with users.\n\n* Provide engineering support when building, deploying, configuring, and supporting solutions for customers and their problems.\n\n* Scope large elements of projects and calculate estimated delivery.\n\n* Review complex existing code in order to refactor and improve it.\n\n* Investigate, analyze, and make recommendations to management regarding technology improvements, upgrades, and modifications.\n\n* Document and demonstrate solutions by developing documentation, flowcharts, layouts, diagrams, charts, code comments, and clear code.\n\n* Prepare and install solutions by determining and designing system specifications, standards, and programming.\n\n* Support and develop software engineers by providing advice, coaching, and educational opportunities.\n\n* Help customers as a technical expert in the delivery of solutions.\n\n\n \n\n#Salary and compensation\n No salary data published by company so we estimated salary based on similar jobs related to Teaching, DevOps, Education, Admin, Engineer, Sys Admin, Testing, Architecture, Developer and Digital Nomad jobs that are similar:\n\n $70,000 — $120,000/year\n
\n\n#Benefits\n 💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n

\nAre you someone who can take a vision of really neat end-user functionality and architect an application that will turn that vision into reality? \n\nYou know that people with vision aren’t always the best at turning it into an operational reality.\n\nYou also know that people who write really good code often don’t consider the bigger picture of what they’re doing it for.\n\nYou consider yourself to be the bridge between the 2.\n\nWe are on the search for a skilled and experienced Software Architect. Your primary responsibilities will be to help create enhancements to existing products and to create new products from concept to launch as part of a cross-functional project team.\n\nYou will design, implement, and test solutions that result in compelling and easy-to-use products.\n\n In more detail, you will:\n\n\n* Develop software solutions by studying information needs, systems flow, data usage, and work processes; investigate problem areas; utilize agile software development techniques; and confer with users.\n\n* Provide engineering support when building, deploying, configuring, and supporting solutions for customers and their problems.\n\n* Scope large elements of projects and calculate estimated delivery.\n\n* Review complex existing code in order to refactor and improve it.\n\n* Investigate, analyze, and make recommendations to management regarding technology improvements, upgrades, and modifications.\n\n* Document and demonstrate solutions by developing documentation, flowcharts, layouts, diagrams, charts, code comments, and clear code.\n\n* Prepare and install solutions by determining and designing system specifications, standards, and programming.\n\n* Support and develop software engineers by providing advice, coaching, and educational opportunities.\n\n* Help customers as a technical expert in the delivery of solutions.\n\n\n \n\n#Salary and compensation\n No salary data published by company so we estimated salary based on similar jobs related to Teaching, DevOps, Education, Admin, Engineer, Sys Admin, Testing, Architecture, Developer and Digital Nomad jobs that are similar:\n\n $70,000 — $120,000/year\n
\n\n#Benefits\n 💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n

\nAre you someone who can take a vision of really neat end-user functionality and architect an application that will turn that vision into reality? \n\nYou know that people with vision aren’t always the best at turning it into an operational reality.\n\nYou also know that people who write really good code often don’t consider the bigger picture of what they’re doing it for.\n\nYou consider yourself to be the bridge between the 2.\n\nWe are on the search for a skilled and experienced Software Architect. Your primary responsibilities will be to help create enhancements to existing products and to create new products from concept to launch as part of a cross-functional project team.\n\nYou will design, implement, and test solutions that result in compelling and easy-to-use products.\n\n In more detail, you will:\n\n\n* Develop software solutions by studying information needs, systems flow, data usage, and work processes; investigate problem areas; utilize agile software development techniques; and confer with users.\n\n* Provide engineering support when building, deploying, configuring, and supporting solutions for customers and their problems.\n\n* Scope large elements of projects and calculate estimated delivery.\n\n* Review complex existing code in order to refactor and improve it.\n\n* Investigate, analyze, and make recommendations to management regarding technology improvements, upgrades, and modifications.\n\n* Document and demonstrate solutions by developing documentation, flowcharts, layouts, diagrams, charts, code comments, and clear code.\n\n* Prepare and install solutions by determining and designing system specifications, standards, and programming.\n\n* Support and develop software engineers by providing advice, coaching, and educational opportunities.\n\n* Help customers as a technical expert in the delivery of solutions.\n\n\n \n\n#Salary and compensation\n No salary data published by company so we estimated salary based on similar jobs related to Teaching, Education, Admin, Senior, Engineer, Sys Admin, Testing, Architecture, Developer and Digital Nomad jobs that are similar:\n\n $65,000 — $120,000/year\n
\n\n#Benefits\n 💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n