QuinnWilton

QuinnWilton

Elixir Engineers @ Tinfoil Security

Hey Elixir Forum!

I’m an engineer at Tinfoil Security. We’re a small team of < 15 people who write automated security analysis tools. A lot of our codebase is in Elixir (though we still have a lot of Ruby), and we’re hoping to hire at least one or two engineers by early 2017. I’ve copied our big formal job posting below, but feel free to ask me any specific questions here, and I’d be happy to help!

If you’re interested, either ping me on here, or reach out at shane@tinfoilsecurity.com

At Tinfoil Security we’re working to make the internet a more secure place. We write tools that are used to secure the largest web applications in the world. If you’ve ever watched a video or streamed music online, your data has probably been secured by code we’ve written. To date, our software has found and fixed over one million security vulnerabilities in the web.

You’ll work on anything from distributed systems to static analysis or information architecture. This means building things that have never been built before: you’ll need to quickly learn new concepts and apply them to your work. We value speed, but we value stability more. We also do a lot of web development, but we spend most of our time working to automate web application and web API security assessments.

Our software stack is primarily Elixir, Ruby, and Go, but we’re advocates of choosing the best tool for the job. If something like Elm is going to help you solve a problem more effectively then we want you to convince us of that.

Qualifications

  • A drive to learn and push your limits
  • An interest in security and an appreciation for privacy
  • Passion. We don’t care in what, but we want you to make us excited about something you care about
  • A pride in your work. We treat our work as a craft, and aren’t done with a new feature until we’re proud of it

Bonus Points:
Experience in:

  • Elixir or Erlang
  • Ruby or Ruby on Rails
  • Javascript, Coffeescript, etc
  • Knockout.js, React, etc

Exposure to security concepts like:

  • Web Vulnerabilities (XSS, SQLi, CSRF, etc)
  • Cryptography

DevOps Experience:

  • We use Docker and CoreOS
  • You’ve built and launched a project from start to finish
  • Our engineering team is also our Ops team. We want people who aren’t afraid to get their hands dirty

Our office is located in Mountain View, CA: Google Maps.

There are parking spaces available, and we’re near the Caltrain and bus stops. Unfortunately we can only accept on-site employees at this time, but we’ll do whatever we can to help you find housing.

Most Liked

andre1sk

andre1sk

I think some info on your interview process would help :slight_smile:

QuinnWilton

QuinnWilton

Good question :slight_smile:

We tend to start with a 30-minute “getting to know you video call”. We’ll talk about your experiences, answer any initial questions you have, and start with a small coding question (i.e. not “re-derive some crazy-complicated graph traversal algorithm we’d expect you to be able to Google if you needed it”).

From there we’ll follow-up with a longer interview, usually about an hour or so long, where we’ll work through a more complicated problem. The problem is usually something we’ve had to solve in the past, and we’re mostly looking to see how we work together and what your thought process is like. There’s no correct answer, and we want it to be more collaborative than anything.

After that, our CEO just likes to hop on one final call, to get a better feel for what you’re looking for out of a job, and to make sure any final questions or concerns you have are addressed.

We’re happy to work through the process as quickly or slowly as you’re comfortable with, keeping in mind that we’re hoping to have the position filled by mid-to-late January of 2017.

This will be our first time hiring a full-time engineer in a while, so I don’t know whether we’re planning to change things up a little bit, but that’s what the process looked like when I joined about two years ago. I do suspect that at some point we’ll want to fly you down to the office to meet the whole team.

Eiji

Eiji

Nice to see a new job offer for elixir enthusiasts!
Unfortunately, UK/USA is at the moment unattainable for me (I reside in small town in Poland).

I’m writing about my passion by big P, A, S, S, I, O and N chars with lots of info about Elixir and more :smile:.
I know:

  1. Elixir, Phoenix, Ecto
  2. Ruby, Ruby on Rails, devise and lots more gems
  3. HTML (also HTML5), CSS3, JavaScript, CoffeeScript

I also read and modify basic examples in lots of languages (for example, C/C++/D/Groovy/Java and more - ok, now I can’t write from mind simple example for all, but I know them, learned graphic libraries usage and bugged some windows :smile:), so learning new things is not so hard for me (except advanced English like learning Assembler - yes I learned it and I created simple windows in GTK+ and changed their icons, but only followed by tutorial in my primary language; I don’'t have any problem using Elixir docs/tutorials - also for external libraries).

I have 0 knowledge about security (I mean writing own libraries). I read about lots of algorithms, so Diffie–Hellman definition is not foreign to me, but don’t expect from me example program that uses it or library that can provide this, but I’m also interested in this topic (like a hundred others, so I don’t have time for all :smile:).

I wish you lots of great CV’s and further successes.

andre1sk

andre1sk

Thank you for very thorough walk through. [quote=“QuinnWilton, post:1, topic:2670”]
but we’ll do whatever we can to help you find housing
[/quote] looking at rent prices in Mountain View this seems like an important point :slight_smile:

ibgib

ibgib

Tinfoil was one of the first (the first?) service for Microsoft Azure that had vulnerability checking for Azure App Services I believe? That looked really cool! :sunglasses: (Alas, I never got to try it out since I moved ibGib code from Xamarin to Elixir Html5 though).

Any (remote :wink:) possibility of remote + part-time work? I have experience with the ridiculous STIGs/NIST/HP Fortify world from a couple years as an Air Force contractor, but my “Passion” is ibGib (site and GitHub) which I have a hard time stepping away from. Incidentally, ibGib is exploring an interesting approach to security focusing on immutable data, IoT, and authentication, “open-sourcing” data much like open-sourcing code. But I digress (frequently)… :eyes:

Where Next?

Popular in Jobs Top

lleger
Introductory paragraph Hiive is looking for a Senior Elixir Backend Engineer to join our product team and work on an Elixir / Phoenix ba...
New
marcelo
Remote is THE global platform that enables companies to employ people anywhere in the world, taking away all legal and compliance complex...
New
sublimecoder
Introductory paragraph InsideTrack is passionate about student success. Since 2001, we have been dedicated to partnering with colleges a...
New
giddie
Passionate about good software design? Comfortable pretty much anywhere in the stack? Interested in EVs and clean energy? Wouldn’t say no...
New
JEG2
Introduction At Payitoff, we help borrowers save money on their student loans and other debts. To accomplish that, we employ a crack tea...
New
rockwood
Shape the future of land investing, wherever you are Join our fully-remote team building the most incredible product for land investors. ...
New
elbasti
Introductory paragraph Trying something new I’ve never seen before: code review as a service! We’re a very small team (2 engineers), bot...
New
QuinnWilton
Hey Elixir Forum! I’m an engineer at Tinfoil Security. We’re a small team of &lt; 15 people who write automated security analysis tools....
New
bengerson
Introductory paragraph Hello Elixir enthusiasts! We’re excited to announce a great opportunity at Candidately. We’re currently seeking a...
New
jarek
Introductory paragraph We are Contractbook, we digitalise the legal industry. Contractbook provides efficient contract management for m...
New

Other popular topics Top

chrismccord
Phoenix 1.4.0 released Phoenix 1.4 is out! This release ships with exciting new features, most notably with HTTP2 support, improved deve...
688 30048 115
New
pmjoe
I have a relationship of love and hate with Elixir. Lots of things are just absolutely right, but there are some things that are kind of ...
New
joaquinalcerro
Hi there, I am working with Ecto-Postgresql and I need to call all of the records from a specific table but the table has 40,000 record...
New
hariharasudhan94
I would like to know what is the best IDE for elixir development?
New
malloryerik
Hi, this is for people who, like me, have had some friction using .html.heex templates in VSCode. The solution seems to be, in a hyphena...
New
chrismccord
This release brings a number of exciting features, including integration with the new Phoenix LiveDashboard and Phoenix LiveView. There h...
New
mcarvalho
What is the difference between System.get_env and Application.get_env? For example, what are best practices to use one versus another.
New
fayddelight
I tried installing elixir 1.11.2 erlang 23.3.4 via asdf in my zsh shell. Enabled the versions locally and globally. When I list them ...
New
electic
Hi, I am new to Elixir. I am trying to use the DateTime component to insert a date into MySQL however the there seems to be no way to fo...
New
beno
I will often find my self writing things similar to: case some_value do nil -&gt; something() "" -&gt; something() _ -&gt; someth...
New

We're in Beta

About us Mission Statement