The opportunity
The Security team is responsible for protecting Asana’s employees, users, and customers. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards to ensure that our data is protected against threats and that we comply with legal, regulatory, and customer requirements.
What they're looking for
- Oversee security architecture reviews and threat modeling for new features: and services, ensuring risks are identified early and secure design decisions are made.
- Own and operate Asana's bug bounty program and mature our vulnerability: management program across software and infrastructure.
- Implement technical security controls within the SDLC, including PR blockers and automated pipeline gates.
- Translate complex technical vulnerabilities into executive-level risk reports: and actionable business insights for senior leadership and legal.