Staff Security Engineer (Security Automation)

Summary

Job Description

• The candidate will work with the Product Security team to build, maintain and run necessary automation for security and compliance. The candidate will have the following core responsibilities:
• Lead, design develop automated workflows using APIs to tackle vulnerability management gaps
• Research and Implement security-focused tools to defend our infrastructure applications from risks. Adopt open source, enterprise security scanners to define automate security development lifecycle processes at scale.
• Develop custom scripts to increase system efficiency and lower the human intervention time on any tasks. Ensure that security requirements and considerations are woven by automation into the development of each system
• Work closely with stakeholders to define and enforce security policies and access controls
• Improve security team efficiency through process automation
• Work in an agile team, pair programming, and support deliverables
• Collect report metrics on automation effectiveness
• Collaborate with peers to integrate secure DevOps principles into CI/CD pipelines and automated builds
• Be a part of on-call PagerDuty rotations
• Drive continuous process feedback improvement

• 10+ years of relevant experience
• Demonstrate coding skills in Python, Java Script, Node.js, React.
• Extensive experience with AWS cloud environment, using its APIs, Serverless Application Model (AWS SAM) and Lambda functions
• Experience working with CI/CD (e.g., TeamCity, Jenkins) pipelines and associated tools.
• Working knowledge of react, Kubernetes, Docker Containers
• Experience in general security concepts, OWASP secure coding practices and standards (MITRE ATTCK, Cyber Kill Chain, cybersecurity detection and response lifecycle)
• Bachelors degree or higher in Computer Science or a related field
• Understanding of Rest APIs and ability to utilize them in the code
• Experienced in design patterns and best coding practices.
• Excellent written and verbal communication skills, and experience working with remote teams
• Have an agile, systematic problem-solving approach, coupled with strong interpersonal skills and a sense of ownership and drive.
• Unimpeachable integrity, character, courage and honesty

About Guidewire

Guidewire is the platform PC insurers trust to engage, innovate, and grow efficiently. We combine digital, core, analytics, and AI to deliver our platform as a cloud service. More than 540+ insurers in 40 countries, from new ventures to the largest and most complex in the world, run on Guidewire.

As a partner to our customers, we continually evolve to enable their success. We are proud of our unparalleled implementation track record with 1600+ successful projects, supported by the largest RD team and partner ecosystem in the industry. Our Marketplace provides hundreds of applications that accelerate integration, localization, and innovation.

For more information, please visit www.guidewire.com and follow us on Twitter: @Guidewire_PandC.

Guidewire Software, Inc. is proud to be an equal opportunity and affirmative action employer. We are committed to an inclusive workplace, and believe that a diversity of perspectives, abilities, and cultures is a key to our success. Qualified applicants will receive consideration without regard to race, color, ancestry, religion, sex, national origin, citizenship, marital status, age, sexual orientation, gender identity, gender expression, veteran status, or disability. All offers are contingent upon passing a criminal history and other background checks where its applicable to the position.