Listing Description
ABOUT KHAN ACADEMY
Khan Academy is a nonprofit organization on a mission to provide a free, world-class education to anyone, anywhere. We already reach millions of students every month and are growing rapidly, and right now we’re hard at work helping learners address any unfinished learning that the COVID-19 pandemic may have caused. We also know that not all communities have been impacted equally by this pandemic, which makes our work focusing on providing equitable solutions to historically under-resourced communities even more important.
WE ARE DRIVEN BY OUR COMMUNITY
Our students, teachers, and parents come from all walks of life and so do we. We are fun, diverse, quirky people that come from a variety of backgrounds. Our team includes people from academia and from high tech companies and tiny startups. We hire great people from diverse backgrounds and experiences, not just because it’s the right thing to do, but because it makes our company stronger. Valuing diversity, equity and inclusion is necessary for us to actualize our mission and truly impact the communities we serve. We believe that the best way to provide impactful education is to create a diverse team of people from different backgrounds, races, religions, genders, sexual orientations, ages, and experiences. We’re a hardworking team that’s passionate about helping learners and teachers around the globe! We strive to be world class in investing in our people and commit to developing you as a professional.
THE ROLE
The role of a security engineer is critical to Khan Academy’s overall success. The security engineering team works across our product and infrastructure on topics including web application security, confidential vulnerability disclosure and resolution, security protection and monitoring, and safeguarding personal data. This work directly contributes to the privacy and security of all of Khan Academy's learners. This work is mostly back end work (mostly Go), but building new security features can often be full stack (React and GraphQL). As a security engineer, you will:
Take on world-changing challenges guided by our Engineering Principles – some of which have never been solved before.
Work with other software engineers in all parts of the organization to address security issues.
Resolve security bugs in the Khan Academy web application.
Build new features to support security goals.
Help where needed. Bring your own creativity to both solutions you implement and new ideas to improve Khan Academy’s security posture.
Collaborate with our infrastructure teams, legal team, community support team, and community volunteers.
Configure security tools to better protect or inform us.
Connect with pentesters, auditors, and other external partners as part of our regular security assessment program.
Have opportunities to contribute to open source! We ❤️ open source, and we give back to the community whenever we can.
WHAT YOU BRING
5+ years of experience as a Security, Infrastructure, or Software Engineer interested in security software, systems, and processes.
Familiarity with security concepts such as authentication, role-based access control/IAM, and incident response.
Experience with code development and debugging on macOS/Linux platforms using Git/GitHub, Jira/Confluence, shell programming, and other CLI tools.
Good understanding of cloud development and engineering.
Experience working with a team.
Desired experience with security monitoring and alerting.
Desired experience with web application firewalls (WAFs) and DDoS protection.
Familiarity with application scanning and vulnerability management is a plus.
BS in Computer Science or equivalent experience.
Good oral and written communication skills, comfortable communicating with groups of people when needed.
You can read about our latest work on our Engineering Blog. A few highlights:
Incremental Rewrites with GraphQL
Our Transition to React Native
Go + Services = One Goliath Project
How Engineering Principles Can Help You Scale
How to upgrade hundreds of React components without breaking production
WE WELCOME
Candidates with experience in any and all technologies. We don’t require experience in any particular language or tool. Our commitment to on-boarding and mentorship means you won’t be left in the dark as you learn new technologies.
PERKS AND BENEFITS
We may be a non-profit, but we reward our talented team extremely well!
Competitive salaries and annual bonuses
Ample paid time off as needed – we are about getting things done, not face time
Generous parental leave
A fun, high-caliber team that trusts you and gives you the freedom to be brilliant
The ability to put your talents towards a deeply meaningful mission and the opportunity to work on high-impact products that are already defining the future of education
Affinity groups where Parents, Black, Hispanic/Latino, Women and Gender Minorities, and LGBTQIA+ identified folks come together
And we offer all those other typical benefits as well: 401(k) + 4% matching & comprehensive insurance including medical, dental, vision, and life
MORE ABOUT US
OUR COMPANY VALUES
Live & breathe learners
We deeply understand and empathize with our users. We leverage user insights, research, and experience to build content, products, services, and experiences that our users trust and love. Our success is defined by the success of our learners and educators.
Take a stand
As a company, we have conviction in our aspirational point of view of how education will evolve. The work we do is in service to moving towards that point of view. However, we also listen, learn and flex in the face of new data, and commit to evolving this point of view as the industry and our users evolve.
Embrace diverse perspectives
We are a diverse community. We seek out and embrace a diversity of voices, perspectives and life experiences leading to stronger, more inclusive teams and better outcomes. As individuals, we are committed to bringing up tough topics and leaning into different points of view with curiosity. We actively listen, learn and collaborate to gain a shared understanding. When a decision is made, we commit to moving forward as a united team.
Work responsibly and sustainably
We understand that achieving our audacious mission is a marathon, so we set realistic timelines and we focus on delivery that also links to the bigger picture. As a non-profit, we are supported by the generosity of donors as well as strategic partners, and understand our responsibility to our finite resources. We spend every dollar as though it were our own. We are responsible for the impact we have on the world and to each other. We ensure our team and company stay healthy and financially sustainable.
Bring out the joy
We are committed to making learning a joyful process. This informs what we build for our users and the culture we co-create with our teammates, partners and donors.
Cultivate learning mindset
We believe in the power of growth for learners and for ourselves. We constantly learn and teach to improve our offerings, ourselves, and our organization. We learn from our mistakes and aren’t afraid to fail. We don't let past failures or successes stop us from taking future bold action and achieving our goals.
Deliver wow
We insist on high standards and deliver delightful, effective end-to-end experiences that our users can rely on. We choose to focus on fewer things — each of which aligns to our ambitious vision — so we can deliver high-quality experiences that accelerate positive measurable learning with our strategic partners.
We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, gender, gender identity or expression, national origin, sexual orientation, age, citizenship, marital status, disability, or Veteran status.
Listing Details
- Citizenship: Not Provided
- Incentives: Not Provided
- Education: Not Provided
- Travel: Not Provided
- Telework: Not Provided