Senior Security Engineer

View full description

Requirements:

• 5+ years of experience working in cyber security engineering and/or architecture at a software company.
• Experience performing security work in a multi-cloud environment is preferred.
• Experience with at least one vulnerability scanning tool (e.g. Qualys, Rapid7, Wiz, etc.).
• Experience as a pen tester for web-based applications and familiarity with the OWASP top ten vulnerability categories.
• Working knowledge of at least one scripting language, Python preferred, and Linux concepts/command-line familiarity.
• Experience with basic SQL and manipulating large data files preferred.
• Understanding of key cryptography concepts such as symmetric/asymmetric keys, algorithms, and protocols (PKI, GPG, RSA, x509 certificates, and TLS/SSL).
• Knowledge of common information security frameworks such as CIS, NIST, ISO 27001 & SOC 2 a plus.
• Ability to work effectively within a fast-paced, changing environment with high growth.
• A self-starter with a demonstrated ability to take initiative, who can proactively identify issues/opportunities and recommend actions.
• Strategic analysis, creative problem-solving, and business judgment are required.
• Excellent interpersonal and communication skills, including writing skills.

Responsibilities:

• Collaborate with Engineering, IT Operations, and DevOps to design, engineer, and support security within our cloud environments, products, and vendor solutions, while promoting DevSecOps.
• Perform security assessments and penetration testing (manage and perform) on web applications, mobile clients, etc.
• Enforce continuous security compliance for our Cloud apps and cloud infrastructure.
• Review and approve controls needed to protect data and technology assets in compliance with policies, regulations, and legal requirements.
• Support incident response and security operations.
• Ensure compliance with and support our vulnerability management program, including SCA, SAST, DAST, penetration testing, and bug bounty programs.
• Provide expertise in the integration efforts of Appfire acquisitions and alignment to information security standards and policies.
• Implement and maintain information security systems and services to support the Information Security team.