Remote Ecommerce + Engineer + InfoSec + Ruby Jobs

\nTaxJar is the leading technology solution for busy eCommerce sellers to manage sales tax and is trusted by more than 20,000 businesses. \n\nWe know sales tax isn't fun for anyone, so we're determined to ease the burden with an exceptional customer experience. To achieve this, we provide the same incredible quality of life for our team members as we do for our customers by creating a professional, unique, award-winning place to work. We have many different backgrounds and lifestyles, and everything we do is guided by our core values:\n\n\n* We do the right thing for our customers\n\n* We're a team, built on trust\n\n* We're proud to be remote\n\n* We're in control of our own destiny\n\n\n\n\n\nWe’re a happy team and we all really love what we do. We’re fast-growing, fully-distributed, talented, and driven. We live all across the US, working from our homes, local libraries, co-working spaces, airstreams - pretty much anywhere we can and do accomplish great work. We've created a space where high-achievers can succeed, but are also safe to fail. We're profitable and focused on growing TaxJar sustainably, and we believe a diverse team can create better solutions for our customers.\n\nWe’re looking for people who:\n\n\n* Are based in the US\n\n* Value working remotely\n\n* Excel at communication and collaboration\n\n* Highly value working with people they like and respect\n\n* Are open and accountable\n\n* Are confident with their skills and who love being part of a team (we’re peers here, no egos please) but are also comfortable working asynchronously\n\n* Want to make a positive impact at TaxJar and who aren’t afraid to fail\n\n\n\n\n\nTaxJar is looking for an exceptional and highly skilled Security Engineer who lives by TaxJar’s values and has a demonstrated track record of securing the SDLC process. TaxJar’s Security Team is responsible for partnering with Engineering teams to build and deploy secure products for our customers. This involves maturing the Secure Development Lifecycle, training developers in secure practices, working with our Operations team to scale and automate security, and innovating new ways to help developers secure themselves.\n\nAs a Security  Engineer for TaxJar you will:\n\n\n* Proactively perform security assessments and reviews (threat models/code reviews/pentests) against TaxJar’s products and services.\n\n* Work with software engineers to design application security review process and controls across a range of technologies to include but not limited to Ruby on Rails, Elixir, and containerized applications\n\n* Own the vulnerability management program and perform regularly-scheduled vulnerability scans to support regulatory compliance and identification of new vulnerabilities\n\n* Identify AWS Security gaps and implement AWS security best practices for our cloud environment (Security Groups, S3 Buckets, IAM Roles and Policies, etc.)\n\n* Be responsible for the Identity access management (IAM) for all users and roles in AWS\n\n* Integrate security best practices into the SDLC process and the CI/CD pipeline\n\n* Act as a technical leader for the security team and work with engineering teams to improve security practices\n\n* Perform security monitoring, security event triage, and lead incident response; including steps to minimize the impact and then conducting a technical and forensic investigation into how the incident happened\n\n* Perform security reviews of the architecture\n\n* Create and maintain comprehensive documentation related to Application and Cloud Security processes and controls\n\n\n\n\n\nRequirements:\n\n\n* 4-6 years of experience in Application/Product Security preferably in SaaS\n\n* 2-4 years of experience within Cloud Security in AWS\n\n* Strong understanding  of AWS IAM, least-privilege access, security groups, VPCs and web applications security best practices\n\n* Pentesting, threat modeling, and architecture review experience\n\n* Hands-on knowledge of security technologies such as IDS/IPS, WAF, vulnerability scanners, etc.\n\n* Experience leading incident response plans, working with SIEM tool for log analysis (i.e. Sumo Logic, Splunk, etc.) a must\n\n* Working knowledge of the OWASP Top 10 security risks and remediation techniques\n\n* Previous programming experience in languages such as Python, Ruby, or Elixir\n\n* Experience with operating systems and hardening (Linux, OS X, and Windows) a plus\n\n* Knowledge of container security such as Docker and Kubernetes a plus\n\n* Certifications such as CISSP, GSEC, CEH or CISM highly desired\n\n* Agile, humble, trustworthy, and a team player\n\n\n\n\n\nBenefits:\n\n\n* Excellent health, vision and dental benefits\n\n* Flexible vacation\n\n* Company holidays, plus mandatory Birthday holiday\n\n* 12 weeks paid parental leave for all employees\n\n* 4 hours volunteer time per month\n\n* Biannual all-company in person summits (paid for by us, of course!)\n\n* $250 Home office stipend\n\n* 401k Plan\n\n* Equity in a profitable company\n\n* Monthly perks reimbursement ($100 a month to appreciate your teammates, Netflix, Amazon Prime, gym membership, home internet etc.)\n\n\n\n\n\n\nPlease visit www.TaxJar.com/jobs for a full list of our amazing benefits for full-time employees, and to learn more about our values and how we work. You can learn more about our hiring process here.\n\nIf you send us a referral for someone who may be a great candidate for this role, we'll pay you $1,000 if we hire them. To refer someone, please email their full name to [email protected] and add “Candidate Referral - [Job Title]” to the subject line once the individual has applied for a role. \n\n#Salary and compensation\n No salary data published by company so we estimated salary based on similar jobs related to InfoSec, Engineer, Amazon, Cloud, Ruby, Sales and Ecommerce jobs that are similar:\n\n $70,000 — $120,000/year\n
\n\n#Benefits\n 💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n

\nWe Are…\n\nShogun, and we're on a mission to help people create the best eCommerce experiences in the world.\n\nWe were in the Winter 2018 batch of Y-Combinator, we just raised a Series A investment, we have over 14,000 active paying clients, and we're preparing to launch a new product in 2020 (you can read more in TechCrunch).\n\nOur teams are fully distributed and global (check out our team page)! We have no office, so we are looking for team members that are comfortable with and motivated by the opportunity to work remotely.\n\n\n\nYou Are…\n\nA self-motivated and passionate Ruby Engineer looking to join our engineering team and help secure our applications and cloud infrastructure.\n\nWe're looking for a talented programmer who is interested in security and eager to help resolve vulnerabilities as they arise, build security processes and tooling, and investigate threats.\n\n\nIn This Role You Will...\n\n\n* Learn from your teammates and help other engineers develop more secure software via design input and code review.\n\n* Contribute to the implementation of secure development practices.\n\n* Resolve security vulnerabilities in the application layer, including those reported through our bug bounty program at Federacy.\n\n* Deliver well-engineered, scalable solutions that improve our defense-in-depth.\n\n* Author and implement an information security policy.\n\n\n\n\n\n\nYou Have...\n\n\n* 5+ years software engineering experience.\n\n* 3+ years of Ruby on Rails, including security responsibilities.\n\n* Proven knowledge of authentication and authorization.\n\n\n\n\n\n\nNice-to-Haves...\n\n\n* Experience with Go, Javascript, MongoDB, and/or Redis.\n\n* Experience securing a cloud platform (AWS, GCP, Azure, etc.).\n\n* Clear and precise written and interpersonal communication skills.\n\n* Effective time management and organizational skills.\n\n* Penetration and vulnerability testing experience.\n\n\n\n\n\n\nWe Offer\n\n\n* Competitive salary\n\n* Benefits (vary by location)\n\n* A highly skilled and dedicated team that is fun to work with.\n\n* Remote work – We are a fully distributed team that works from anywhere with good internet. (+13 countries just on the engineering team!)\n\n* Occasionally, we hire on a full time contractor basis to begin with. Team members enjoy the same opportunities for great compensation, full time positions, and consideration, regardless of location.\n\n\n\n\n\n\nTry Out Shogun\n\nIf you want, you can use Shogun to get a feel for the product. We'd love to hear what you think. Here is how:\n\n* Create a Shopify Developer Account: https://developers.shopify.com\n\n* Create a development store: https://help.shopify.com/en/partners/dashboard/development-stores\n\n* Install Shogun on your development store: https://apps.shopify.com/shogun\n\n* Create a couple of pages. We will take a look.\n\n \n\n\n\nShogun supports workplace diversity and does not discriminate on the basis of race, color, religion, gender identity/expression, national origin, age, military service eligibility, veteran status, sexual orientation, marital status, physical or mental disability, or any other protected class \n\n#Salary and compensation\n No salary data published by company so we estimated salary based on similar jobs related to InfoSec, Engineer, Cloud, Ruby, Ecommerce and Shopify jobs that are similar:\n\n $70,000 — $120,000/year\n
\n\n#Benefits\n 💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n

\nWe Are…\n\nShogun, and we're on a mission to help people create the best eCommerce experiences in the world.\n\nWe were in the Winter 2018 batch of Y-Combinator, we just raised a Series A investment, we have over 10,000 active paying clients, and we're preparing to launch a new product in 2020 (you can read more in TechCrunch).\n\nOur teams are fully distributed and global (check out our team page)! We have no office, so we are looking for team members that are comfortable with and motivated by the opportunity to work remotely.\n\n\n\nYou Are…\n\nA self-motivated and passionate Security Engineer (with experience in Ruby on Rails and/or Go) looking to join our engineering team and help secure our applications and cloud infrastructure.\n\nWe're looking for a talented Security professional to investigate threats, triage and resolve vulnerabilities, help to write and implement our information security policy, and build tools that allow engineers to quickly and easily develop secure code.\n\n\n\nIn This Role You Will...\n\n\n* Help other engineers design more secure software via design input and code review\n\n* Contribute to the implementation of secure development practices\n\n* Triage and resolve security vulnerabilities in the application layer, including those reports through our bug bounty program at Federacy\n\n* Deliver well-engineered, scalable solutions that improve our defense-in-depth\n\n* Author and implement an information security policy\n\n* Teach and learn from your teammates\n\n\n\n\n\n\nYou Have...\n\n\n* 5+ years software engineering experience\n\n* 3+ years of Ruby on Rails and/or Go experience, including security responsibilities\n\n* Penetration and vulnerability testing experience\n\n* Proven knowledge of authentication and authorization\n\n\n\n\n\n\nNice-to-Haves...\n\n\n* Experience with Javascript, MongoDB, and/or Redis\n\n* Experience securing a cloud platform (AWS, GCP, Azure, etc)\n\n* Clear and precise written and interpersonal communication skills\n\n* Effective time management and organizational skills\n\n\n\n\n\n\nWe Offer\n\n\n* Competitive salary\n\n* Benefits (vary by location)\n\n* A highly skilled and dedicated team that is fun to work with.\n\n* Remote work – We are a fully distributed team that works from anywhere with good internet. (+13 countries just on the engineering team!)\n\n* Occasionally, we hire on a full time contractor basis to begin with. Team members enjoy the same opportunities for great compensation, full time positions, and consideration, regardless of location.\n\n\n\n\n\n\nTry Out Shogun \n\nIf you want, you can use Shogun to get a feel for the product. We'd love to hear what you think. Here is how:\n\n* Create a Shopify Developer Account: https://developers.shopify.com\n\n* Create a development store: https://help.shopify.com/en/partners/dashboard/development-stores\n\n* Install Shogun on your development store: https://apps.shopify.com/shogun\n\n* Create a couple of pages. We will take a look.\n\n\n\nShogun supports workplace diversity and does not discriminate on the basis of race, color, religion, gender identity/expression, national origin, age, military service eligibility, veteran status, sexual orientation, marital status, physical or mental disability, or any other protected class \n\n#Salary and compensation\n No salary data published by company so we estimated salary based on similar jobs related to InfoSec, Engineer, Cloud, Ruby, Ecommerce and Shopify jobs that are similar:\n\n $70,000 — $120,000/year\n
\n\n#Benefits\n 💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n

\nWe Are…\n\nShogun, and we're on a mission to help people create the best eCommerce experiences in the world.\n\nWe were in the Winter 2018 batch of Y-Combinator, we just raised a Series A investment, we have over 10,000 active paying clients, and we're preparing to launch a new product in 2020 (you can read more in TechCrunch).\n\nOur teams are fully distributed and global (check out our team page)! We have no office, so we are looking for team members that are comfortable with and motivated by the opportunity to work remotely.\n\n\n\nYou Are…\n\nA self-motivated and passionate Security Engineer (with experience in Ruby on Rails and/or Go) looking to join our engineering team and help secure our applications and cloud infrastructure.\n\nWe're looking for a talented Security professional to investigate threats, triage and resolve vulnerabilities, help to write and implement our information security policy, and build tools that allow engineers to quickly and easily develop secure code.\n\n\n\nIn This Role You Will...\n\n\n* Help other engineers design more secure software via design input and code review\n\n* Contribute to the implementation of secure development practices\n\n* Triage and resolve security vulnerabilities in the application layer, including those reports through our bug bounty program at Federacy\n\n* Deliver well-engineered, scalable solutions that improve our defense-in-depth\n\n* Author and implement an information security policy\n\n* Teach and learn from your teammates\n\n\n\n\n\n\nYou Have...\n\n\n* 5+ years software engineering experience\n\n* 3+ years of Ruby on Rails and/or Go experience, including security responsibilities\n\n* Penetration and vulnerability testing experience\n\n* Proven knowledge of authentication and authorization\n\n\n\n\n\n\nNice-to-Haves...\n\n\n* Experience with Javascript, MongoDB, and/or Redis\n\n* Experience securing a cloud platform (AWS, GCP, Azure, etc)\n\n* Clear and precise written and interpersonal communication skills\n\n* Effective time management and organizational skills\n\n\n\n\n\n\nWe Offer\n\n\n* Competitive salary\n\n* Benefits (vary by location)\n\n* A highly skilled and dedicated team that is fun to work with.\n\n* Remote work – We are a fully distributed team that works from anywhere with good internet. (+13 countries just on the engineering team!)\n\n* Occasionally, we hire on a full time contractor basis to begin with. Team members enjoy the same opportunities for great compensation, full time positions, and consideration, regardless of location.\n\n\n\n\n\n\nTry Out Shogun \n\nIf you want, you can use Shogun to get a feel for the product. We'd love to hear what you think. Here is how:\n\n* Create a Shopify Developer Account: https://developers.shopify.com\n\n* Create a development store: https://help.shopify.com/en/partners/dashboard/development-stores\n\n* Install Shogun on your development store: https://apps.shopify.com/shogun\n\n* Create a couple of pages. We will take a look.\n\n\n\n\nShogun supports workplace diversity and does not discriminate on the basis of race, color, religion, gender identity/expression, national origin, age, military service eligibility, veteran status, sexual orientation, marital status, physical or mental disability, or any other protected class \n\n#Salary and compensation\n No salary data published by company so we estimated salary based on similar jobs related to InfoSec, Engineer, Cloud, Ruby, Ecommerce and Shopify jobs that are similar:\n\n $70,000 — $120,000/year\n
\n\n#Benefits\n 💰 401(k)\n\n🌎 Distributed team\n\n⏰ Async\n\n🤓 Vision insurance\n\n🦷 Dental insurance\n\n🚑 Medical insurance\n\n🏖 Unlimited vacation\n\n🏖 Paid time off\n\n📆 4 day workweek\n\n💰 401k matching\n\n🏔 Company retreats\n\n🏬 Coworking budget\n\n📚 Learning budget\n\n💪 Free gym membership\n\n🧘 Mental wellness budget\n\n🖥 Home office budget\n\n🥧 Pay in crypto\n\n🥸 Pseudonymous\n\n💰 Profit sharing\n\n💰 Equity compensation\n\n⬜️ No whiteboard interview\n\n👀 No monitoring system\n\n🚫 No politics at work\n\n🎅 We hire old (and young)\n\n