Udemy is looking to enhance the security and trust of its AI-powered skills acceleration platform by designing and building security-focused tools, services, and features that protect both learners and products.
Requirements
- 3+ years of software engineering experience, preferably in backend or full-stack development.
- Strong programming experience in at least one modern language (Python, JavaScript/TypeScript, Kotlin, or similar).
- Familiarity with backend frameworks such as Django, Flask, Spring Boot, or equivalent.
- Experience building or integrating security tools (SAST, SCA, secrets scanning, dependency management).
- Hands-on experience with security-focused engineering: secure coding, threat modeling, IAM concepts, and secure system design.
- Understanding of modern cloud architectures and CI/CD pipelines.
- Experience working within a Secure Software Development Lifecycle (SSDLC).
Responsibilities
- Design, build, and maintain security tooling, automation, and services that empower engineers to ship secure code.
- Develop features and backend components that improve the security posture of Udemy's platform.
- Perform secure code reviews, threat modeling, and risk assessments across critical services.
- Integrate and optimize static analysis, dependency scanning, and runtime protection into developer workflows.
- Identify and remediate security vulnerabilities across Udemy's applications and infrastructure.
- Partner with product and engineering teams to embed security-by-design principles.
- Contribute to 24/7 on-call rotations for security-critical systems.
Other
- Full access to Udemy courses, a monthly UDay to invest in yourself, and a budget to spend on whatever helps you improve.
- Participation in an on-call rotation for security-related systems.
- Collaboration openly and shaping ideas together.
- Trust to lead, make decisions, and follow through.
- Diversity and inclusion, with consideration of qualified applicants without regard to race, color, religion, sex, national origin, ancestry, age, genetic information, sexual orientation, gender identity, marital or family status, veteran status, medical condition, or disability.
