Application Security Engineer

About the job Application Security Engineer

Threat modeling: Think about how attackers can compromise a system and what protections are needed against them

Secure Software Development Lifecycle: Help developers write secure code that minimizes vulnerabilities by implementing secure coding standards, techniques, and best practices. Define and approve security architecture of the developed solution.

Security code reviews: Identify security vulnerabilities in source code before an application is deployed to production

Vulnerability testing and analysis: Discover weaknesses once an application is deployed and advise development teams on remediation.

Qualifications

At least 6 years of experience in Application Security.

Strong knowledge of the modern web, mobile, and network security. Experience in penetration testing and understanding of exploitation techniques for web and mobile applications.

At least basic programming skills with Go, Python or other languages. You don't need to be a skilled developer, but you will need to find a common language with our RnD team, so at least some understanding is necessary.

Any public researchers, tools, disclosed tickets will be considered a strong advantage. Wrote a blog post about your research or have a CVE? Please, be sure to mention it.

Deep understanding of modern cybercrime and complex attack techniques.

Good knowledge and understanding of major attacks and recent security events.

Proven presentation skills and fluent speaking English.

Experience in malware analysis (windows executables, exploits, scripts).

Experience in penetration testing and understanding of exploitation techniques.

#J-18808-Ljbffr