Application Security Engineer

  • Job Type: Permanent
  • Location: USA USA
  • Date Posted: August 24, 2021

Hello! Interested in applying? We welcome you to fill out your details in the fields laid out below so we can get your CV straight to our recruiter:

  • Thank you for giving us your email address! We will use it to contact you about this role, and we will also send you confirmation of your application.
  • Please tell us your nationality so we can assess whether you are able to work in the roles location, or assess the possibility of arranging a suitable visa.
  • Allowed files: .doc, .docx, .pdf
    Drop files here or
    Accepted file types: doc, docx, pdf.
    • Read about how First Point Group uses the data that you provide by clicking here: First Point Group Policies and Statements

    Application Security Engineer

    FPG Cyber is currently recruiting on behalf of our prestigious client, a world-leading SaaS/IoT provider, for a Senior Application Security Engineer, to work at our client’s state-of-the-art San Mateo offices. Due to an exceptional year, our client is now growing rapidly, looking to scale up at a rapid pace. They are an innovative security provider, looking to modernize the world of enterprise-level building Security. This is a fantastic opportunity to excel in your career, for someone who wants autonomy in their next role with the opportunity to make a lasting impact & build a legacy!

    The Role:

    The ideal candidate will be working very closely with our client CISO, as well as their Security Engineering & Development teams, ensuring that the software is being built securely and protecting both the users and their systems. It will be your role to ensure implementation & continuous improvement of the application security framework to harden online services and prevent attacks. Our client strongly believes that keeping data secure & private is core to our well-being as individuals, businesses, & communities. The care that they are putting into building their system, embodies their values as people & as a company.

    Responsibilities:

    – Arrange Security tooling & secure defaults, to safeguard software security best practices
    – Perform Architectural Analysis, Threat Modeling & Technical Design reviews of sensitive infrastructure features
    – Facilitate in the smooth integration of security systems into our clients’ applications throughout the entire software development lifecycle
    – Collaborate with engineering & product teams to improve the security of all our clients’ products whilst exceeding their customers’ expectations
    – Evangelize security software best practices through training & information sharing
    – Coordinate with other security engineering leaders to define & execute all Targets/Priorities
    – Design, Produce & Operate a ‘bug bounty’ program. Triage & recommend solutions for Security bugs from tools, 3rd party assessments & bug bounties
    – Work with the CISO & security teams to cultivate & widen our client entire security programs
    – Share your Cyber Security knowledge, skills & experience with others both internally & externally, via Security Conferences, Client Consultants & blogs
    – Assist in the development of peers/colleague engineers growing in their own security knowledge

    Qualifications:

    – BSc in Computer Science or equivalent
    – Solid knowledge of AWS, GCP or any other cloud service provider
    – 5+ years of experience as a Snr Security Engineer, Site Reliability Engineer, or Security Software Engineer, Consultant
    – Enthusiasm & passion for learning about new Cyber Security products, features, and strategies
    – Understanding of Security weaknesses, exploits, attacks & mitigations
    – Involvement & passion for learning about new Cyber Security products, features, & strategies
    – Ability to code – The ideal candidate will sometimes write production Python/Go code, Security peer-review code, build proofs of concept or implement automation scripts
    – Experience with the majority of the following: Threat Modeling, Security Development Lifecycle, Architecture Analysis, Open Policy Agent, Technical Design Review, Security Code Review, SIEM

    Start date is = immediate (notice period accepted for the right candidates) please forward your resumes to: Tom Layzell at FPG Cyber tlayzell@firstpointgroup.com (202) 972 4320