![](\"https:\/\/we-work-remotely.imgix.net\/logos\/0154\/3195\/logo.gif?ixlib=rails-4.0.0&w=50&h=50&dpr=2&fit=fill&auto=compress\"){kind=logo}
<\/p>\nRemote Jobs<\/p>\n
Region: Anywhere in the World<\/p>\n
State: Utah<\/p>\n
<\/p>\n
\n Headquarters:<\/strong> Worldwide! We're fully remote. We\u2019re YNAB<\/a> (\u201cwhy-nab\u201d), a financial education company with a mission: to help people get good with money so they never have to worry about money again. For over 20 years, YNAB\u2019s proven method has been changing lives\u2014and people can\u2019t stop telling their friends about the difference it\u2019s made. Think: debt paid off, marriages strengthened, goals achieved, stress erased, and sleep finally restored. But don\u2019t just take our word for it\u2014dive into our vibrant communities on \u0641\u064a\u0633\u0628\u0648\u0643<\/a>, TikTok<\/a>, \u0648 Reddit<\/a> (really!) or skim through our glowing app<\/a> reviews<\/a>. You\u2019ll quickly see why people rave about YNAB and why we\u2019re so passionate about creating something that truly changes lives for the better.<\/p>\n Before we can help people get good with money, they need to trust YNAB with private details of their lives. And to those who work here, YNAB embodies years of relentless effort to craft something uniquely wonderful. Honoring that trust and protecting the company we\u2019re proud of is why this position exists. Our security team is dedicated full-time to safeguarding YNAB, and they have a single primary outcome to achieve: <\/p>\n Keep YNAB Secure.<\/p>\n If the thought of anchoring our commitment to protecting YNAB and its customers resonates deeply, you\u2019re our target audience\u2014please read on.<\/p>\n To be considered for this role, you must:<\/p>\n Have at least two years of hands-on experience in security engineering, software engineering, DevOps, IT security, or a closely related technical field.<\/p>\n<\/li>\n Have practical experience with application security (for example: performing code reviews, threat modeling, working with developers on secure design, or using SAST\/DAST tools).<\/p>\n<\/li>\n Have experience building, maintaining, or monitoring security logs\u2014preferably with DataDog, but similar systems (Splunk, ELK, CloudWatch, etc.) are fine.<\/p>\n<\/li>\n Live in the United States, in either the Central (UTC-6) or Eastern (UTC-5) timezone, and be authorized to work here without sponsorship.<\/p>\n<\/li>\n<\/ul>\n These aren\u2019t required, but are likely to set you up for success:<\/p>\n Some level of formal technical education and\/or a security-related certification (such as CISSP, CEH, Security+, CC, CCSP, Pentest+, or similar). <\/p>\n<\/li>\n Proficiency in at least one modern programming or scripting language (e.g., Python, Go, Java, JavaScript).<\/p>\n<\/li>\n Familiarity with security frameworks such as SOC 2, ISO 27001, NIST, or CIS Controls.<\/p>\n<\/li>\n Experience working at a technology and\/or SaaS company.<\/p>\n<\/li>\n Exposure to regulated industries (e.g., finance, healthcare).<\/p>\n<\/li>\n Comfort working cross-functionally with engineering, support, or compliance teams.<\/p>\n<\/li>\n<\/ul>\n Note: If you believe you\u2019re a fit for this role, but don\u2019t meet our preferred qualifications, we still encourage you to apply. While our hard requirements are non-negotiable, we\u2019re otherwise open-minded, and don\u2019t need you to be the perfect candidate on paper. <\/p>\n That\u2019s a quick snapshot of what we\u2019re looking for. Before we go further, let\u2019s make sure you\u2019re excited about working with us. We\u2019ll share more about YNAB, then dive into the role details and application process (be sure to read all the way to the end!).<\/p>\n YNAB started in 2004 and we haven\u2019t taken any outside funding\u2014we\u2019re established, profitable, and in this for the long haul. We have one overarching requirement when it comes to joining our team: our original Core Value Manifesto<\/a> has to really click with you. If you\u2019re nodding emphatically while reading it, you\u2019ll probably like it here!<\/p>\n We live our Core Values every day at YNAB, and we mean it when we say we are an equal opportunity employer. We believe a diversity of backgrounds, abilities, and experiences is critical to our success, and we are passionate about creating a welcoming and supportive environment for every employee. All are encouraged to apply as we continue growing a smart, hard-working, and diverse team that loves building something that matters.<\/p>\n We also work really hard, together, to make working at YNAB an amazing experience. We\u2019re (humbly) proud to have received many of Fortune\u2019s \u201cGreat Place to Work\u201d awards<\/a> over the years, including #1 two years in a row! We have a team of truly exceptional people\u2014the kind you\u2019ll be delighted to work with. Let\u2019s introduce you to a few of them!<\/p>\n You’ll work most closely with Kendal (our Security Lead), and Chris (our Systems Administrator), while collaborating with the wider Engineering department (which includes teams of QA analysts, full stack, iOS, and Android engineers). <\/p>\n Kendal develops and implements our security roadmap, from technical security to governance, risk and compliance. She lived in London for six years before moving back home to South Africa in 2024. When she isn\u2019t securing stuff, she\u2019s spending time in Cape Town\u2019s mountains and oceans. <\/p>\n Chris is our systems administrator, which is a fancy title for a technology generalist. Day in and day out, Chris is helping to make sure everyone at YNAB has the tools to do their job, access to the systems needed to do their job, and a little bit of \u201cwe\u2019re not sure who should be doing this\u201d. Outside of YNAB, Chris is a middle grade author writing books for kids who\u2019d rather not be reading.<\/p>\n Regardless of their varied jobs, everyone in Engineering has one thing in common: They are a joy to work with. You won\u2019t find heated arguments and raised voices here. We save our competitive spirit for YNAB\u2019s external competitors (or the occasional online game session), but internally we build up our teammates and celebrate their successes. We all love to solve problems in creative ways, and we regularly take time to geek out and show each other something cool we built or found to make our lives easier.<\/p>\n Though you\u2019ll be embedded in Engineering, you\u2019ll probably cross paths with many people at YNAB at some point. We can\u2019t list them all, but we can say that we are all excited to get to know you!<\/p>\n Now that you\u2019ve learned about some of your future teammates, let\u2019s talk more about YNAB and what it\u2019s like to work here.<\/p>\n At YNAB, we think one of the best things we can offer is the chance to do meaningful work alongside people you respect, admire, and genuinely enjoy. And we mean that\u2014from the beginning, we\u2019ve been intentional about creating the company we want to work for. <\/p>\n Along the way, we\u2019ve learned that great teams aren\u2019t built on perks or fancy titles\u2014they\u2019re built by bringing together high performers who thrive on tough challenges and share a commitment to doing exceptional work. We value discipline and ownership over unnecessary layers of process, and look for people who wake up excited to get important things done. <\/p>\n That\u2019s the team we\u2019re building at YNAB: one that cares deeply, works pragmatically, and always finds time to laugh (mostly at ourselves).<\/p>\n We\u2019ve always been a fully remote team, and have people all over the world. For this particular position, however, we’re looking for someone based in the United States, in either the Central (UTC-6) or Eastern (UTC-5) timezone. Anywhere within those time zones is okay, though. Just make sure you have a reliable internet connection. (Like, a really good one. Please.)<\/p>\n We\u2019ve adopted a four-day work week and rarely work more than that. There are occasions and seasons where things get busy and people put some extra time in\u2014but then we encourage them to take some extra time off, too. We\u2019re a product-led organization that takes our work-life balance seriously, so we all prioritize working hard and smart, but at a measured pace. We care deeply about what we do, but we also love our families and about 2,000 other things. We have perspective and, ultimately, we think it makes us\u2014and our work\u2014even better.<\/p>\n As a remote team, a lot of our work is done asynchronously. Outside of your meetings and on-call times, we trust you to set your schedule by balancing your team\u2019s needs with your own needs. You don\u2019t need to ask for permission to take off early for an afternoon appointment, or be \u201cactive\u201d on Slack if you\u2019re working deeply on a project. We look at what you accomplish, not how long you’re in front of a computer.<\/p>\n We want you to take vacation. In fact, we have a minimum vacation policy of three weeks per year. Five weeks feels about right (plus two extra weeks for our company-wide December Break). It\u2019s important to get plenty of downtime and to get out and do something. We\u2019ll look forward to seeing pictures of your adventures in our #office-wall Slack channel!<\/p>\n We love remote work around here, but we also love getting together in person. You\u2019ll generally have the opportunity to meet with your YNAB teammates at least once a year, at a small-team work-focused meetup or at our biennial company retreat. At the YNAB retreat, we love to catch up on spreadsheets and powerpoints in a Best Western conference room. Just kidding. To give you an idea, we\u2019ve been to Costa Rica<\/a>, a gigantic cabin<\/a> in the mountains, a ranch in Montana, Palm Springs<\/a>, and most recently, Cape Cod. We work together, play together, and strengthen the bonds we\u2019ve made as a team and company. At the end of each retreat, we feel energized, inspired, and excited to tackle the work ahead.<\/p>\n We\u2019re serious about helping you improve your craft, and will provide you with a professional development stipend each year. Think conferences, online courses, coaching, and dedicated time away from work to learn something new. We love to see our people grow!<\/p>\n Our team is spread all over the world\u2014mostly in the United States, but also in the UK, Canada, Germany, Brazil, Mexico, and several other countries. Everyone is eligible for our generous paid family leave, vacation, holidays, and sick time. <\/p>\n Since you\u2019re based in the United States, you\u2019ll also be eligible for our health, dental, and vision insurance, where we cover 100% of the premium for you and your family. No need to check your vision, you read that right\u2014100%. (Although if you did need to check your vision, NBD, we\u2019ve got you covered!) <\/p>\n We also have a Traditional and Roth 401(k) option, where YNAB matches your contributions up to six percent with immediate vesting. (Are you a personal finance junkie like our founder Jesse? He set up YNAB\u2019s 401k to have the lowest fee structure possible, where all plan costs are paid by YNAB, not your retirement nest egg. The investment funds available are fantastic, passively-managed, ultra low-cost index funds. Not a PF junkie? Trust us, it\u2019s awesome.) <\/p>\n At YNAB, we are dedicated to providing equitable, market-driven, and data-informed compensation, along with a competitive benefits package. The starting salary for this role will range from $120,000 – $140,000 USD annually. (This covers a wide range of possible experience; think of it like a bell curve. Most candidates fall somewhere around the midpoint.) You’ll also be eligible for an annual raise and profit-sharing twice a year. When YNAB succeeds, so do you\u2014that\u2019s the idea.<\/p>\n Once you start, we DEMAND (in a friendly, ALL CAPS IS YELLING way) that you fill out your \u201cBucket List\u201d spreadsheet with 50 items. (That\u2019s harder than it sounds!) <\/p>\n<\/li>\n We love to celebrate with you when you complete something on your bucket list\u2014AND, we love using your bucket list as inspiration for your birthday present!<\/p>\n<\/li>\n We want you firing on all cylinders, so we\u2019ll set you up with a shiny new computer and replace it every three years. <\/p>\n<\/li>\n Did we mention that YNAB makes a huge, positive difference in people\u2019s lives? You may not think that matters much, but then a few months down the road, you\u2019ll realize it\u2019s made your job really, really enjoyable. Don\u2019t underestimate this!<\/p>\n<\/li>\n<\/ul>\n If this sounds like your ideal environment, read on because now we want to talk about you, and how you\u2019ll play a big part in changing people\u2019s lives.<\/p>\n In this hands-on, highly technical role, you\u2019ll join forces with Kendal to make YNAB Even More Secure\u2122. (Okay, it\u2019s not a trademark, but we felt like it deserved capitalization because we are just that grateful for you two.)<\/p>\n While Kendal is focused on higher-level compliance and risk management, you\u2019ll be focused on technical security implementation and security architecture support. In true team fashion, you\u2019ll both share responsibility for incident response and monitoring (this is where your timezone comes in handy; you\u2019ll be available when Kendal is not, and vice versa).<\/p>\n To say a bit more about each of those:<\/p>\n You\u2019ll be hands-on with implementing security controls and processes. On a day-to-day basis, you\u2019ll:<\/p>\n Configure and maintain security tooling across the organization, including monitoring systems, vulnerability management platforms, and automated security processes.<\/p>\n<\/li>\n Implement and optimize access controls, authentication systems, and data protection measures.<\/p>\n<\/li>\n Write automation scripts, analyze security logs, and help maintain our security infrastructure.<\/p>\n<\/li>\n Help maintain security standards, guidelines, and best practices.<\/p>\n<\/li>\n<\/ul>\n You\u2019ll work with our Engineering team to design and implement secure systems and help ensure security is built into our products from the ground up. To do so, you\u2019ll:<\/p>\n Collaborate with engineers to integrate security into the development lifecycle through activities like secure code reviews, threat modeling, and design consultations.<\/p>\n<\/li>\n Conduct security testing of new features and systems, including vulnerability assessments and security reviews.<\/p>\n<\/li>\n Perform security assessments to proactively identify potential issues, in line with security by design principles.<\/p>\n<\/li>\n<\/ul>\n You\u2019ll help monitor our security landscape, investigate potential threats, assist with incident response, and contribute to our continuous improvement of security practices. Alongside Kendal, you\u2019ll:<\/p>\n Monitor security events, analyze threats, and respond to security incidents with appropriate containment and remediation actions.<\/p>\n<\/li>\n Support bug bounty program activities and coordinate responses to external security reports.<\/p>\n<\/li>\n Research emerging threats and maintain awareness of security trends relevant to our technology stack.<\/p>\n<\/li>\n<\/ul>\n You\u2019re passionate about building secure systems and protecting our users.<\/p>\n<\/li>\n You\u2019re excited to dig into the technical details. You thrive on solving complex technical problems and aren\u2019t afraid to learn new technologies.<\/p>\n<\/li>\n You balance thoroughness with pragmatism\u2014you know when to dig deeper and when to move forward with the information you have. <\/p>\n<\/li>\n You communicate well with both technical and non-technical teammates, and enjoy collaborating across different teams. You pride yourself on being approachable and easy to work with.<\/p>\n<\/li>\n You enjoy thinking outside of the box when it comes to security and compliance. Rather than blocking progress, you consider all choices before making a decision, adapt when you receive new information, and know the right solution is the one that works best for YNAB.<\/p>\n<\/li>\n You\u2019re eager to dive deep into meaningful security challenges, while growing your expertise.<\/p>\n<\/li>\n<\/ul>\n In summary: If you\u2019re technically skilled, security-focused, and excited to help keep YNAB safe\u2026 we hope you\u2019ll apply!<\/p>\n Submit your application here<\/a> (including what\u2019s listed below) by Sunday, January 25th at 11:59pm PT. Firm. It\u2019s a real deadline.<\/p>\n A resume. If you don\u2019t have an updated formal resume, that\u2019s fine! An informal overview of your work history and education is all we\u2019re looking for.<\/p>\n<\/li>\n A cover letter and answers to a few specific questions. This isn\u2019t your typical cover letter\u2014skip the fluff and formalities, and just help us get to know you. <\/p>\n<\/li>\n On page 1: We\u2019d love for you to tell us a bit about yourself, what drew you to work in security, why you\u2019re interested in this role at YNAB, and why you think you\u2019d be a great fit. <\/p>\n<\/li>\n On page 2 onward: Please answer these questions three:<\/p>\n<\/li>\n 1. Tell us about a time when you were convinced you were right about something at work, but later changed your mind. What swayed you? Please answer in 1-2 paragraphs.<\/p>\n<\/li>\n 2. How have you honed your craft in security engineering, and how do you see yourself continuing to develop your skills in the future? Feel free to share specific strategies, sources of information or inspiration, and\/or your general approach. Please answer in 1-2 paragraphs.<\/p>\n<\/li>\n 3. Imagine you\u2019re our Security Engineer. You\u2019ve just discovered a potentially critical vulnerability in a third-party dependency used in our codebase. Now it\u2019s your job to validate the vulnerability and raise it to the engineering team responsible for remediation. Please craft a 1-2 paragraph vulnerability report as though you\u2019re writing directly to them. (Feel free to make assumptions about this scenario to guide your response.)<\/p>\n<\/li>\n<\/ul>\n<\/ul>\n<\/ul>\n Please be yourself! ChatGPT can sit this one out. <\/p>\n<\/li>\n If you meet our hard requirements and follow the application instructions, we promise a real human will review your materials. <\/p>\n<\/li>\n Though we know it\u2019s customary in some areas, please do not share a headshot anywhere in your application materials.<\/p>\n<\/li>\n You\u2019ll only be able to apply once, so make sure your answers are final before you click submit. (You can start your application and come back to it later.) <\/p>\n<\/li>\n Keep an eye out for an email from @pinpoint.email titled Thank you for applying to YNAB! This confirms your application has been received. If you don\u2019t receive it, please apply again. <\/p>\n<\/li>\n If we can help with an accessibility need, email us at accommodations@ynab.com and indicate in the subject line that you\u2019re applying for the Security Engineer role. (Please note that we can only respond to messages related to accommodations at this email.)<\/p>\n<\/li>\n
\n
URL:<\/strong> https:\/\/www.ynab.com\/<\/a>\n<\/p>\nAbout Us and Why We\u2019re Hiring<\/h1>\n
What We\u2019re Looking For:<\/h2>\n
Hard Requirements<\/h3>\n
\n
Preferred Qualifications<\/h3>\n
\n
Life at YNAB<\/h2>\n
Who You\u2019ll Work With<\/h2>\n
How You\u2019ll Work at YNAB<\/h1>\n
Building a Good Company<\/h2>\n
Live (Almost) Anywhere You Want<\/h2>\n
Work Four Days a Week<\/h2>\n
Flex Your Work Schedule<\/h2>\n
Take Vacation (Seriously)<\/h2>\n
Meet the Team IRL<\/h2>\n
Up Your Game<\/h2>\n
Other Benefits<\/h2>\n
Competitive Compensation<\/h2>\n
A Few Final Tidbits<\/h2>\n
\n
Now back to you, our new Security Engineer\u2026<\/h1>\n
Technical Security Implementation<\/h3>\n
\n
Security Architecture Support<\/h3>\n
\n
Incident Response and Monitoring<\/h3>\n
\n
You\u2019re the person we\u2019re looking for if:<\/h2>\n
\n
\u0637\u0631\u064a\u0642\u0629 \u0627\u0644\u062a\u0642\u062f\u064a\u0645<\/h1>\n
What to include in your application:<\/h2>\n
\n
\n
\n
Tips:<\/h2>\n
\n