Senior Security Engineer

Description

What You Get To Do

• With more than 7+ years of Total industry experience
• Support, implement, and improve Secure Software Development Lifecycle (SDLC).
• Act as a consultant to the design and development stages of SDLC.
• Document and work with product and engineering teams to implement security best practices and system configuration standards.
• Perform Security Architecture, AppSec and Risk Assessments.
• Perform Threat Modelling.
• Analyze, manage, and work with other teams to address vulnerabilities, code weaknesses, misconfigurations, and non-compliance findings.
• Maintain and administer security tooling.
• Lead security projects dedicated to improving Uplights's security posture.
• Respond to and assist with incidents as needed or assigned.
• Perform an on-call shift rotation.
• Demonstrate effective communication skills, both verbal and written.
  

What You Bring To Uplight

• Advanced experience in securing applications and application settings
• Advanced experience in app and product security
• Advanced understanding in securing cloud technologies
• Experience with technologies from at least one public cloud (AWS, GCP, Azure)
• Experience in securing containerization (Docker, K8s, etc) and API
• Experience with modern DevSecOps practices including implementing automated security in IaC and CI/CD pipelines
• Strong scripting skills Python/Shell Scripting experience
• Mid to advanced level Linux knowledge in a physical, virtual, or public cloud environment.
• Exceptional verbal and written communication skills are necessary to effectively collaborate with peers, and to present and explain highly technical information to stakeholders who may have limited technical knowledge.
  

Bonus Points

• CISSP, CASP+, GSLC, CISM certified.
  

Qualifications

• Bachelor's or Master's degree in Computer Science, Engineering, or a related field.