Coordinate with partners to implement solutions that protect the company, its systems, and data
Work with IT staff to improve the security of our services
Design technical solutions to address security weaknesses
Analyze system services, spot issues in code, networks, and applications from a security perspective
Provide penetration testing support, project security reviews, and application scanning processes throughout the stages of the software development lifecycle
Track security vulnerabilities and exposure in third-party libraries and manage mitigation implementations
Work to mature internal libraries, build systematic protections for classes of vulnerabilities
Manage third-party code reviews for high-exposure projects
Integrate static analysis into our continuous integration process

Requirements

10+ years work experience in application development or application security
Experience with web application penetration testing
Professional development in at least two or more languages - we use Ruby, Python, Clojure, and Apex (Salesforce)
Experience deploying SAST tooling and integrating it into developer workflows
Supply chain security management with Artifactory or similar
In-depth experience with web vulnerabilities, including deploying best-practice framework fixes into legacy codebases
Experience with independent or dev-paired code reviews, including both finding vulnerabilities and teaching developers how to find and reduce issues
Experience mentoring other engineers in security

Benefits

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

application developmentapplication securityweb application penetration testingRubyPythonClojureApexSAST toolingsecurity vulnerabilitiescode reviews

Soft Skills

mentoringteachingcommunication