Sr. Information Security Engineer

Job Responsibilities

Operational

Act as a security-focused engineering leader that is passionate about learning, mentoring, teaching, and problem solving

Work collaboratively and proactively across the organization with product teams on Application Security initiatives

Be creative and solve problems with scalable solutions

Identify and define application security requirements and author security policies

Maintain knowledge of current and emerging secure application technologies, products, and trends

Actively and continuously share role-specific knowledge with team members and product teams

Participate in Agile SCRUM ceremonies, requirements gathering, priority and risk identification, proposing solutions, estimating timeframes , and driving tasks to completion

Technical

Build, maintain , deploy, and operate security tools and configuration at-scale for the Application Security program

Collaborate with product teams to ensure secure coding best practices are followed

Identify and support the development of new security tools that enable the team to increase coverage, scale, and monitoring

Review and contribute to application designs and solutions

Collaborate with engineers to maintain and continually improve existing security tools

Qualifications & Experiences

5+ years of p roven and extensive Software Engineering experience developing and maintaining scalable, Cloud-native software solutions

Proven and extensive experience with container technologies, AWS, and infrastructure-as-code ( IaC ) such as Terraform, Cloud Formation, etc.

Proven and extensive experience building tools and automation to support an Application Security team

Proven and extensive experience in secure software development principles in various languages and frameworks (Python, JavaScript, TypeScript, Java, Go, etc.)

A strong desire to help engineering teams build consumer applications securely

Strong understanding of software development methodologies and secure coding practices

Strong understanding of the SDLC and CI/CD pipelines

Strong understanding of application security standards and practices, such as the OWASP Top 10

Knowledge of practical threat modeling for consumer applications

Demonstrated ability to explain risks and vulnerabilities to both technical and non-technical audiences

Hands-on experience working with DevOps and Agile-driven product teams

Excellent written and verbal communication skills

Ability to work effectively in a team or individually and receptive to feedback

Preferred Qualifications

Exposure to popular application and API security standards including OWASP ASVS, OWASP Top 10, and OWASP Mobile Top 10.

Experience with GitHub Security features

Knowledge of cloud security principles

Bachelor's degree in IT, Computer Science, or Information Security preferred

ISC2 CSSLP, GIAC (GWEB, GCSA), or other Security Certifications