Paramo Technologies

Engineer

• Manage and operate application security and code vulnerability tools (e.g., SAST, DAST, dependency scanning, container security).
• Identify, analyze, and validate vulnerabilities discovered in source code, applications, containers, and external attack surface.
• Support and oversee vulnerability discovery activities, including:
• o Automated scanning tools
• o Bug bounty findings
• o Manual testing results (where applicable)
• Coordinate and support vulnerability remediation with development teams.
• Manage and improve the Secure Software Development Lifecycle (SSDLC).
• Review and manage the handling of secrets and sensitive data using tools such as HashiCorp Vault.
• Perform security reviews of external libraries, dependencies, and supply chain components.
• Support security testing tools such as OWASP ZAP, Acunetix, Burp Suite, SonarQube, Outpost24 EASM, and container scanning solutions.
• Correlate findings from multiple security tools and prioritize remediation based on risk.
• Ensure vulnerabilities are properly tracked, documented, and managed through Jira tickets.
• Validate that remediation actions are correctly implemented before closing tickets.
• Contribute to defining security standards, guidelines, and best practices for developers.
• Document new procedures or update existing ones related to application and development security.
• Ensure documentation is accurate, comprehensive, and delivered on time.
• Collaborate with SOC, IAM, and SIEM engineers when vulnerabilities or incidents overlap domains.
• Create reports and metrics related to vulnerabilities, remediation status, and SSDLC effectiveness.
• Engage in ongoing training and professional development to stay current with emerging threats, vulnerabilities, and secure development practices.
• Share knowledge and expertise with development and security teams to foster a culture of secure-by-design development.
• Adhere to the organization's different policies.
• Keep your work organized and traceable through tickets (Jira).

AppSec Engineer

QA Engineer

• Manage exploratory and automated tests to ensure product quality.
• Design and implement tests, debug and define corrective actions.
• Review system requirements and track quality assurance metrics (e.g., defect densities and open defect counts).
• Monitor all stages of software development to identify and resolve system malfunctions.
• Prepare detailed, comprehensive, and well-structured test plans and test cases.
• Review requirements, specifications, and technical design documents to provide feedback.
• Plan and coordinate testing activities, thoroughly identify and document bugs.
• Build and execute automation scripts using open source tools.
• Organize testing processes for new and existing products to meet client needs.
• Collaborate with internal teams to identify system requirements.
• Track quality assurance metrics, like defect densities and open defect counts.
• Analyze the causes of non-conforming software and train users to implement solutions.
• Maintain relevant knowledge about new testing tools and test strategies.
• Explore opportunities where Artificial Intelligence can enhance product capabilities or internal processes.

AppSec Engineer

QA Engineer – Javascript, Typescript