Senior Security Engineer

View full description

Requirements:

• 6+ years of progressive security engineering experience with expertise in multiple security domains including but not limited to Security Architecture, Cryptography, Network Security, Cloud Security, Mobile Security, and Web Security.
• Experience in Secure Development Lifecycle and Shift Left with a Security by Design methodology.
• Experience with SAST, DAST, SCA tools and penetration testing activities.
• Experience with threat modeling, architecture reviews and OWASP Top 10 guidelines.
• Scripting/development skills (e.g., Python, C, C++, Java, Ruby, or PowerShell).

Responsibilities:

• Identify security threats in application and infrastructure, conduct in depth security assessments of applications and systems to identify vulnerabilities and provide remediation mentorship to affected system/application owners.
• Independently assess and improve security program, join forces with SRE and development teams to find new and creative ways to reduce the occurrence of vulnerabilities at scale.
• Review quality issues and work towards detecting security flaws. Build repeatable and reusable security processes and frameworks.
• Assist with prioritizing prospective projects, participating in projects from kick off through “definition of done” via end-to-end ownership.
• Use your validated experience to own and drive resolution and retesting of sophisticated security events, policy questions, and technical security risks.