Duties and Responsibilities

• Security Integration: Embed security practices into the software development lifecycle, ensuring that security is considered at every stage, and implemented as a self-service capability wherever feasible (shift-left).
• Automation: Develop and maintain automated security tools and scripts to identify and remediate security vulnerabilities in code and infrastructure.
• Code Review and Analysis: Perform security code reviews and static/dynamic analysis to identify vulnerabilities in applications written in Java Script, Go, and Python.
• Collaboration: Work closely with Engineering and IT teams to promote security best practices and provide guidance on secure coding standards.
• Incident Response: Assist in the investigation and response to security incidents and vulnerabilities, providing technical expertise and recommendations.
• Continuous Improvement: Stay up-to-date with the latest security trends, vulnerabilities, and tools, and continuously improve the security posture of our applications and infrastructure.
• Documentation: Create and maintain comprehensive security documentation, including policies, procedures, and guidelines.
• Consultant: Act as a security consultant on secure software development practices, and provide hands-on training and coaching for Developers

Qualifications

• A bachelor’s degree in a related discipline or equivalent professional experience.
• At least 4 years acting in an Application Security Engineer role with progressive responsibility.
• Strong experience integrating and managing DAST, SAST or IAST, and SCA tools and how these feed into Vulnerability Management initiatives.
• Understanding of how scanning tools, penetration tests, and post-deploy scanning tools work together in the application security lifecycle.
• Deep, hands-on experience implementing App Sec tools into a Dev Ops pipeline.
• Solid understanding of application security issues, risks, and mitigation strategies.
• Experience developing and refining Secure SDLC documents and processes.
• Experience building and leading Information Security training focused on developers and based on OWASP principles.
• Experience assessing and securing open-sourced software components.
• Strong interpersonal verbal and written communications skills with proven experience of collaboration across different engineering areas.
• Deep knowledge of containers and orchestrators, and hands-on experience with securing and monitoring CI/CD pipelines.
• Understanding of Go, Python, Java, Javascript code, and their common security flaws.
• Hands-on experience with Terraform is a plus.
• Experience with low-code automation tools (XSOAR, Tines, etc.) is a plus.
• Professional certification is a plus (OSCP, SANS, CISSP or similar).

Physical/Cognitive Requirements

• Prompt and regular attendance at assigned work location.
• Ability to work shifts of at least 8 hours, 5 days per week.
• Ability to thrive in a fast-paced, high-intensity work environment.
• Ability to remain seated in a stationary position for prolonged periods.
• Requires eye-hand coordination and manual dexterity sufficient to operate keyboard, computer and other office-related equipment.
• No heavy lifting is expected, though occasional exertion of about 20 lbs. of force (e.g., lifting a computer / laptop) may be required.
• Ability to interact with leadership, employees, and members in an appropriate manner.

• 
  Remote-first culture
• 401(k) savings plan through Fidelity
• Comprehensive medical, vision, and dental coverage through multiple medical plan options (including disability insurance)
• Full suite of Included Health telemedicine (e.g. behavioral health, urgent care, etc.) and health care navigation products and services offered at no cost for employees and dependents
• Generous Paid Time Off ("PTO") and Discretionary Time Off (“DTO")
• 12 weeks of 100% Paid Parental leave
• Up to $25,000 Fertility and Family Building Benefit Compassionate Leave (paid leave for employees who experience a failed pregnancy, surrogacy, adoption or fertility treatment)
• 11 Holidays Paid with one Floating Paid Holiday
• Work-From-Home reimbursement to support team collaboration and effective home office work
• 24 hours of Paid Volunteer Time Off (“VTO”) Per Year to Volunteer with Charitable Organizations Your recruiter will share more about the benefits package for your role during the hiring process.