• The ideal candidate will bring a combination of strong technical skills, experience with application security, and ability to collaborate with the Engineering team
• At least 5+ years experience as a Security Engineer focusing on application security, infrastructure security, or security operations
• Bachelor's / master’s degree in computer science, Computer Engineering, (or equivalent experience)
• Experience in the following domains: APIs Security, Vulnerability Scan, compliance and threat detection, OWASP Top 10 API Security, Web App Security, AppSec, SAST, DAST, and SCA (Software composition analysis)
• Experience with different enterprise components to publish and use APIs (e.g., API Gateways, Microservices, Cloud Components)
• Experience with Mobile application development and SDKs
• Experience with security testing for server-side SDKs
• Experience with API security testing, vulnerability scan and compliance reporting
• Experience with OWASP Top 10 for Web App & APIs
• Experience with OpenAPI, and other common formats for organizing and functionally testing REST APIs
• Excellent analytical, written, and verbal communication skills – capable of explaining complex requirements in simple words
• Comfortable with conflicts and capable of influencing cross-functional teams
• Any programming or integration experience in the past will be highly beneficial

Desirable

• We are seeking an experienced, Senior Application Security Engineer reporting directly to the Head of Security
• This position will have a significant impact on maturing our SDLC and implementing security best practices
• This important role will help develop and implement the security champions program within our Engineering organization and drive security maturity across the organization
• Work with the engineering team to assess current secure SDLC processes and make recommendations on security best practices
• Collaborate with the security team on developing and implementing the Security Champions program
• Demonstrate subject matter expertise in AppSec, DAST, SAST, SCA/SBOM, OWASP Top 10, API Security and other relevant areas
• Identify tools for code scanning and work with Engineers on procedures for code testing
• Respond to vulnerabilities from our bug bounty program and drive remediation with Engineering teams
• Work with Engineering and Product teams on identity and access management to systems and tools to ensure principle of least privilege
• Assist with the sales enablement process and participate on customer calls to address remediation efforts
• Participate in compliance efforts such as SOC2, ISO, and HIPAA/HITRUST audits
• Educate the Engineering team on secure coding practices and procedures