Aha! is the world’s #1 product development software, helping more than 1 million product builders transform strategy into delivery. With a fully remote, self‑funded, profitable business, we’re recognized as one of the best remote companies to work for and champion the Bootstrap Movement.
Team
- We help each other grow : Onboarding gives new hires quick access to the codebase and lets them contribute immediately.
- We move quickly : Code is shipped multiple times a day, with a focus on functional value and incremental learning.
- We value product over process : Clear goals and minimal overhead keep teams focused on solving complex challenges.
- Knowledge sharing : Our engineering blog and community talks expose our lessons and challenges.
- We enjoy what we do : Our responsive method, company values, and generous benefits keep the team motivated.
Technology
Aha!’s web application is a Ruby on Rails monolith with a Postgres database, Redis background jobs, Kafka event processing, and Memcached caching, hosted on AWS ECS. A Node.js server supports collaborative editing and real‑time updates. Front‑end development uses React for interactive features atop Rails.
Experience
The primary focus of this role is web application security; candidates must be deeply knowledgeable about vulnerabilities, mitigations, and securing data in multitenant architectures.
Skills
Four or more years of application security experienceActive collaboration with engineering and product teamsExperience reviewing or threat‑modeling full‑stack web applicationsProficiency with security tools such as CodeQL or Burp SuiteExperience with Ruby on Rails is a plusRole
Identify application security threats and propose mitigations early in the development cycleImprove and maintain security code‑scanning toolsContribute to application security scanning or testing activitiesDevelop and share secure coding patterns to educate the engineering teamBenefits
Base salary range : $110,000 – $190,000 (U.S.)Profit sharing and retirement contributionsMedical, dental, and vision plans (many teammates receive 100% cover)Up to 200 hours of paid time off annually30 – 90 days of paid parental leave and 5 – 10 days of care & bereavement leaveUp to $1,000 annual budget for third‑party education and related paid time offVolunteer opportunities throughout the yearReferrals increase your chances of interviewing at Aha! by 2x
#J-18808-Ljbffr