Summary

We're looking for an Application Security Engineer who will be responsible for designing and implementing robust security frameworks to protect our software and infrastructure. This role involves conducting regular security assessments, including Cloud, Kubernetes, and our Products, to identify and address vulnerabilities. Additionally, the engineer will collaborate with development teams to integrate security practices throughout the software lifecycle, ensuring that all products meet the highest security standards before deployment.

In this role, you’ll:

1. Develop and manage CI/CD pipeline development, ensuring secure code integration, testing, and deployment.
2. Implement and maintain secure cloud infrastructures using tools like Kubernetes and Terraform.
3. Manage software libraries and dependencies to ensure secure and up-to-date components within the software lifecycle.
4. Analyze and apply findings from static and dynamic application security testing to enhance system security continuously.
5. Integrate security protocols and standards into the software development lifecycle (SDLC) to ensure robust and secure product releases.
6. Enhance security measures across cloud environments (AWS, GCP) and ensure compliance with regulatory standards.
7. Work with cross-functional teams to implement security best practices and enhance security features within product designs.
8. Conduct regular security assessments to identify and remediate infrastructure and cloud security weaknesses.
9. Continuously analyze and apply findings from security testing to enhance system security.

We’re looking for candidates who have: 

1. CI/CD Pipeline Management: Proven experience in building, automating, and securing CI/CD pipelines.
2. Code Level Security: Expertise in implementing code-level security measures throughout the software development lifecycle.
3. Software Library Management: Experience managing software libraries and ensuring secure, up-to-date dependencies.
4. Application Security Experience: Proficiency in using SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), and SCA (Software Composition Analysis) to identify and remediate security vulnerabilities in software applications.
5. Automation and Scripting: Proficiency in scripting languages such as Python or Bash for automating security and logging tasks.
6. Collaboration Skills: Excellent communication skills, both verbal and written, for effective collaboration with cross-functional teams.
7. Security Best Practices: Understanding of secure coding practices, with a primary focus on infrastructure and cloud security.

Nice to have experience:

1. Infrastructure Expertise: Strong experience in designing, deploying, and managing secure cloud infrastructures using Kubernetes and Terraform.
2. Cloud Platforms: Proficiency in AWS and GCP, with a focus on implementing and managing security services.
3. Security and Compliance Expertise: Hands-on experience with security compliance standards such as ISO 27001 or SOC 2, and prior involvement in incident response and management within cloud environments, especially in regulated industries like finance or healthcare.

Technologies we use:

1. Coding Languages - Java, Javascript, Python, 
2. IaC - Terraform
3. Cloud - AWS, GCP
4. CI/CD Pipeline - Github, GitHub Actions, Jenkins
5. API’s - REST APIs

Skills

• AWS
• Communications Skills
• Development
• Java
• Python
• Team Collaboration