Senior Staff Application Security Engineer

View full description

Requirements:

• 4+ years of proficiency in a mix of Enterprise Application Security, API Security, Web Application Security, and Mobile Application Security
• 4+ years of developing commercial or open-source products (experience in Java or Javascript preferred) or equivalent experience
• Exceptional problem-solving skills, curiosity about the inner workings of systems and showing attention to details and documentation
• Excellent written and oral communication skills

Responsibilities:

• Own multiple Security Engineering assignments working with Ping Identity products, processes and tooling
• Provide technical leadership and mentor other Product Security Engineers
• Assist in proposing, developing and improving Secure Software Development Lifecycle (SSDLC) practices alongside global, high-performance product engineering teams
• Work with the product teams to perform architectural, security design/code reviews, vulnerability assessment and management
• Perform security tasks including (but not limited to) threat modeling, developer training, static code analysis, dynamic runtime fuzzing, building custom tools and automation, and exploit development.
• Innovate in all aspects of automation of SSDLC tasks including use of Generative AI
• Assist the presales, support and customer success teams responding to prospect, customer and field questions related to product and industry security
• Engage with third-party security consultants for independent security assessments, bug bounties and penetration testing of the product