QuinnWilton

QuinnWilton

Elixir Engineers @ Tinfoil Security

Hey Elixir Forum!

I’m an engineer at Tinfoil Security. We’re a small team of < 15 people who write automated security analysis tools. A lot of our codebase is in Elixir (though we still have a lot of Ruby), and we’re hoping to hire at least one or two engineers by early 2017. I’ve copied our big formal job posting below, but feel free to ask me any specific questions here, and I’d be happy to help!

If you’re interested, either ping me on here, or reach out at shane@tinfoilsecurity.com

At Tinfoil Security we’re working to make the internet a more secure place. We write tools that are used to secure the largest web applications in the world. If you’ve ever watched a video or streamed music online, your data has probably been secured by code we’ve written. To date, our software has found and fixed over one million security vulnerabilities in the web.

You’ll work on anything from distributed systems to static analysis or information architecture. This means building things that have never been built before: you’ll need to quickly learn new concepts and apply them to your work. We value speed, but we value stability more. We also do a lot of web development, but we spend most of our time working to automate web application and web API security assessments.

Our software stack is primarily Elixir, Ruby, and Go, but we’re advocates of choosing the best tool for the job. If something like Elm is going to help you solve a problem more effectively then we want you to convince us of that.

Qualifications

  • A drive to learn and push your limits
  • An interest in security and an appreciation for privacy
  • Passion. We don’t care in what, but we want you to make us excited about something you care about
  • A pride in your work. We treat our work as a craft, and aren’t done with a new feature until we’re proud of it

Bonus Points:
Experience in:

  • Elixir or Erlang
  • Ruby or Ruby on Rails
  • Javascript, Coffeescript, etc
  • Knockout.js, React, etc

Exposure to security concepts like:

  • Web Vulnerabilities (XSS, SQLi, CSRF, etc)
  • Cryptography

DevOps Experience:

  • We use Docker and CoreOS
  • You’ve built and launched a project from start to finish
  • Our engineering team is also our Ops team. We want people who aren’t afraid to get their hands dirty

Our office is located in Mountain View, CA: Google Maps.

There are parking spaces available, and we’re near the Caltrain and bus stops. Unfortunately we can only accept on-site employees at this time, but we’ll do whatever we can to help you find housing.

Most Liked

andre1sk

andre1sk

I think some info on your interview process would help :slight_smile:

QuinnWilton

QuinnWilton

Good question :slight_smile:

We tend to start with a 30-minute “getting to know you video call”. We’ll talk about your experiences, answer any initial questions you have, and start with a small coding question (i.e. not “re-derive some crazy-complicated graph traversal algorithm we’d expect you to be able to Google if you needed it”).

From there we’ll follow-up with a longer interview, usually about an hour or so long, where we’ll work through a more complicated problem. The problem is usually something we’ve had to solve in the past, and we’re mostly looking to see how we work together and what your thought process is like. There’s no correct answer, and we want it to be more collaborative than anything.

After that, our CEO just likes to hop on one final call, to get a better feel for what you’re looking for out of a job, and to make sure any final questions or concerns you have are addressed.

We’re happy to work through the process as quickly or slowly as you’re comfortable with, keeping in mind that we’re hoping to have the position filled by mid-to-late January of 2017.

This will be our first time hiring a full-time engineer in a while, so I don’t know whether we’re planning to change things up a little bit, but that’s what the process looked like when I joined about two years ago. I do suspect that at some point we’ll want to fly you down to the office to meet the whole team.

Eiji

Eiji

Nice to see a new job offer for elixir enthusiasts!
Unfortunately, UK/USA is at the moment unattainable for me (I reside in small town in Poland).

I’m writing about my passion by big P, A, S, S, I, O and N chars with lots of info about Elixir and more :smile:.
I know:

  1. Elixir, Phoenix, Ecto
  2. Ruby, Ruby on Rails, devise and lots more gems
  3. HTML (also HTML5), CSS3, JavaScript, CoffeeScript

I also read and modify basic examples in lots of languages (for example, C/C++/D/Groovy/Java and more - ok, now I can’t write from mind simple example for all, but I know them, learned graphic libraries usage and bugged some windows :smile:), so learning new things is not so hard for me (except advanced English like learning Assembler - yes I learned it and I created simple windows in GTK+ and changed their icons, but only followed by tutorial in my primary language; I don’'t have any problem using Elixir docs/tutorials - also for external libraries).

I have 0 knowledge about security (I mean writing own libraries). I read about lots of algorithms, so Diffie–Hellman definition is not foreign to me, but don’t expect from me example program that uses it or library that can provide this, but I’m also interested in this topic (like a hundred others, so I don’t have time for all :smile:).

I wish you lots of great CV’s and further successes.

andre1sk

andre1sk

Thank you for very thorough walk through. [quote=“QuinnWilton, post:1, topic:2670”]
but we’ll do whatever we can to help you find housing
[/quote] looking at rent prices in Mountain View this seems like an important point :slight_smile:

ibgib

ibgib

Tinfoil was one of the first (the first?) service for Microsoft Azure that had vulnerability checking for Azure App Services I believe? That looked really cool! :sunglasses: (Alas, I never got to try it out since I moved ibGib code from Xamarin to Elixir Html5 though).

Any (remote :wink:) possibility of remote + part-time work? I have experience with the ridiculous STIGs/NIST/HP Fortify world from a couple years as an Air Force contractor, but my “Passion” is ibGib (site and GitHub) which I have a hard time stepping away from. Incidentally, ibGib is exploring an interesting approach to security focusing on immutable data, IoT, and authentication, “open-sourcing” data much like open-sourcing code. But I digress (frequently)… :eyes:

Where Next?

Popular in Jobs Top

james-whitehat
Introductory paragraph We're looking for a mid/senior engineer to help create the first version of our platform - an Elixir/Phoenix pro...
New
elbasti
Introductory paragraph Trying something new I’ve never seen before: code review as a service! We’re a very small team (2 engineers), bot...
New
olivermt
Introductory paragraph OMT Tech is an international development company founded on the single principle of developing interesting projec...
New
harmon25
Hi All, We at Control Gap Inc. are looking for passionate candidates to join our new development team. About us My name: Doug Wright ...
New
ku1ik
Introductory paragraph Vic.ai is a 2 year old startup, based in Oslo, Norway (we also have non-tech offices in NYC and Miami). We’re bui...
New
marcelo
Remote is THE global platform that enables companies to employ people anywhere in the world, taking away all legal and compliance complex...
New
james-bowers
Introductory paragraph You’ll be joining a small, focused team working on a reusable cross-platform resiliency layer. You will design so...
New
eglimi
Introductory paragraph: Hello fellow developers. We are looking for a freelancer who enjoys working full stack in Elixir / Phoenix and w...
New
sschuth
Introductory paragraph We offer something rare: a job with a purpose, a great team, a growing company, all in a choose-to-be-remote-if-i...
New
RESTAR
RESTAR is a Japanese startup providing a B2B information analysis/management platform for the real estate industry. We are leveraging El...
New

Other popular topics Top

JakeBecker
TL;DR: I’ve just released an implementation of Microsoft’s IDE-independent Language Server Protocol for Elixir. It adds language support ...
1140 51847 244
New
albydarned
Hello all! I am typing this post from my new MacBook Pro with the M1 chip. I’m loving it so far, and will probably use it as my daily dr...
New
joaquinalcerro
Hi there, I am working with Ecto-Postgresql and I need to call all of the records from a specific table but the table has 40,000 record...
New
malloryerik
Hi, this is for people who, like me, have had some friction using .html.heex templates in VSCode. The solution seems to be, in a hyphena...
New
jononomo
I am trying to figure out how Mix knows whether the environment is test, dev, or prod -- where is this set? Thanks.
New
polypush135
As many of you may have realized by now (sorry for all the posts here) I’ve been working on a db problem where I’m trying to aggregate a ...
New
belgoros
I’m not a pro in using Regex and can’t figure out why the following behaviour happens, especially if we take into account the difference ...
New
9mm
I am constructing a JSON object (map) and I need to conditionally set a field. I’m trying to write proper elixir-way code… and I’m at a l...
New
Qqwy
Original source of discussion: This topic on the Pragmatic Programmers' Functional Web Development with Elixir, OTP, and Phoenix forum. ...
New
AstonJ
by Lance Halvorsen Elixir and Phoenix are generating tremendous excitement as an unbeatable platform for building modern web application...
460 27162 124
New

We're in Beta

About us Mission Statement