WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
Back

Security Engineer

ACCELDATA, INC.
Campbell, United States
2 days ago
Apply on startup.jobs
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Job source
startup.jobs

Tech stack

Java (Programming Language) Software System Penetration Testing Software Bug Management Cyber Security White-Box Testing Open Source Technology Open Web Application Security Fortify (Software) Secure Coding Software Vulnerability Management Software Security Checkmarx
+3 more
Appscan Static Application Security Testing Dynamic Application Security Testing

Job description

  • You will be part of a security team that spans proactive testing and reactive response, and you will need a working knowledge of SOC (Security Operations Centre) operations, real-time threat monitoring and response and how they complement proactive security efforts.
  • Run periodic penetration tests and white-box assessments to verify that security requirements have been met. Where possible, test before a product ramps.
  • Own end-to-end CVE management, including triage and impact analysis (confidentiality, integrity, availability). Ensure open-source dependency vulnerabilities are remediated and that monthly and quarterly patch releases carry the latest security fixes.
  • Partner across cross-functional teams to integrate thorough security and risk questionnaire evaluations into the sales/vendor review lifecycle.
  • Coordinate regular third-party application security assessments on Acceldata products. Make sure bugs are filed, fixed, and the results actioned.
  • Perform threat modelling and design reviews for products and features.
  • Build security automation for continuous validation, SAST and DAST.
  • Act as first responder for customer-facing security questions on CVEs, bug triage and incident management.
  • Partner with Product, Engineering and other teams, internal and external, to deliver secure software.

Requirements

  • Hands-on, production experience in penetration testing, white-box testing, application security and vulnerability management
  • Strong command of the OWASP Top 10, and experience finding these issues in real applications
  • Experience fixing security issues in Java code and Experience with API security testing
  • Hands-on experience with AppScan, Fortify and Checkmarx (SAST/DAST tooling)
  • Experience delivering secure code training to developers and bug bounty programs
  • Strong communication skills and a collaborative approach with the engineering team

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on startup.jobs
Prepare application

Good distractions

Loading talks and stories from around this role…