Senior Software Engineer II (Application) @ Precise

• Ethically hack applications to find security vulnerabilities
• Guide integration of SAST, DAST and OSA scanning into products CI/CD pipelines, and assist in reviewing security vulnerabilities found by the tools
• Collaborate with application engineering teams during threat modelling, as well as selecting / implementing key security remediations or enhancements
• Review latest security technologies for testing and securing applications
• Monitor security trends and assist in global alerting and resolution around major CVE?s that may impact products
• Promote secure software development techniques and training for engineering teams
• Supply expert knowledge in the fields of security, data privacy, common attack vectors and compliance with related regulations standards

SCOPE OF RESPONSIBILITIES

• Offensive security experience is a MUST; Bug Bounty Hunting experience is preferred.
• Ethical Hacker- should be able to use Automated DAST tools against Web Application, Web Services and Mobile Applications.
• Should have worked with common Application Security Test tools such as Checkmarx or AppScan Source, BurpSuite or AppScan Standard, Open Source Analysis tools, etc.
• Demonstrated experience in PKI standards and policies, asymmetric and symmetric encryption, key management and secrets management platforms.
• Experience performing Open Source Intelligence gathering .
• Demonstrated ability to work in a fast-paced multi-tasking Agile environment.
• Demonstrated technical leadership and teamwork skills encompassing internal and external resources.
• Demonstrated ability to technically coach team members on security practices and collaborate with engineering teams.
• Demonstrated excellence in English communication skills with multiple stakeholders: clients, management, employees, and vendors.
• Experience with AWS security features is added advantage.
• Experience with Docker security reviews is added advantage.
• Experience with Automation using Jenkins / TeamCity / GitLab or other build pipelines for integration of security tests in CI/ CD desirable.
• Network security experience desirable.
• Experience in architecture, design and securing enterprise high scale, distributed applications is preferred.
• Experience with Cloud based WAF DDOS Solutions.
• Take action to learn, teach and support the company?s core values, employment policies, business practices, and programs
• Build relationships with other departments by understanding position responsibilities and priorities, demonstrate a positive team approach in day-to-day activities.