Вакансия Application Security Engineer

3 вакансии
Специализация: Other
Уровень: Senior
Опыт: 3 года
Уровень английского: Intermediate
Зарплата: от $3000
Город: Минск
Размер команды: 3—5
Размер компании: 25
Возможна удалённая работа: Да

InCountry is helping companies meet the increasing complexity of data residency and data protection laws globally by enabling companies to quickly address data residency issues in a secure manner.  The Trust and Security team at InCountry is focused on ensuring the appropriate internal controls are in place and operating effectively to mitigate risks to InCountry and its customers.

As a key team member of the Trust and Security team, you will help ensure InCountry maintains the highest level of security and privacy in our services, evangelize the importance of security and privacy both internally and externally, manage the InCountry SDLC program and work directly with InCountry engineering teams to ensure InCountry ships and maintains secure and private services.

Responsibilities

  • Own and manage the InCountry bug bounty program
  • Manage SDLC program
  • Conduct penetration testing of application and infrastructure and work with teams to close all findings
  • Conduct red team tests
  • Perform threat models of all applications, risk rate all findings and work with teams to close all findings
  • Develop, communicate and provide regular updates on application security roadmap 

Requirements

  • 5-7 years in an application security role
  • Prior experience developing threat models in alignment with industry standards (e.g. NIST, MS SDL, etc)
  • Be a security subject matter expert and respond to any internal security engineering questions/request
  • Correctly balance security risk and product advancement
  • Perform penetration testing on our internal and external applications
  • Perform proactive research to detect new attack vectors
  • Prior experience integrating static & dynamic analysis in CI/CD pipeline
  • Train our engineers on secure software engineering
  • Interact with the security community promoting the InCountry brand
  • Excellent written and verbal communications skills
  • SME in cryptography, authentication and security protocols
  • Bachelor's degree in Computer Science or a related field

Preferences

  • Prior experience with GCP, AWS, Azure and GKE 
  • Has a deep understanding of web applications
B3e5440ae7b55fd967a5779278921e78
Представитель компании
Вакансии компаний