Senior Application Security Engineer

What you'll do

• Analyze, validate, and consult on security defects identified by automated tools and manual testing.
• Provide contextually aware guidance to engineers and architects regarding security decisions and architecture.
• Enable and monitor automated defect detection tooling at the repository or application level.
• Manage the scope, access, and results of penetration testing and security assurance assessments.
• Advise software engineers on practices to improve application security maturity based on established scorecards.
• Author error reports in partnership with developers to prevent recurring security mistakes across applications.

What we're looking for

• Knowledge of software development life cycle (SDLC) for delivering and managing new or enhanced products.
• Knowledge of software integration processes, including designing and maintaining interfaces with other platforms.
• Knowledge of software product design to convert market requirements into technical designs.
• Ability to analyze situations and reach productive decisions based on informed judgment.
• Ability to effectively communicate, receive, and interpret ideas and information across teams.
• Experience as a software engineer in any language or framework (preferred).
• Experience working on major cloud platforms like AWS, Azure, GCP, or Salesforce (preferred).
• Experience analyzing/remediating security findings from SAST, DAST, penetration testing, or SCA (preferred).
• Experience building web applications and APIs including SPAs and RESTful APIs (preferred).
• Professional certifications in cybersecurity or software engineering (preferred).