Senior Software Security Validation Engineer

Job Description
Designs, develops, tests, and debugs software applications used by endusers or integrated with other applications by ISVs. Development may span the full application stack including both frontend and backend application development. Uses modern software development methodologies and programming languages, follows secure coding practices and software legal compliance guidelines, analyzes user stories, writes both functional and test code, automates build and deployment, and performs unit integration and endtoend testing of applications. Completes SDL tasks with the assistance of product security engineers and provides input to technical writers to complete product documentation and procedures for installation and maintenance. May also interact with end users to define system requirements and/or necessary modifications.

Qualifications

Minimum qualifications are required to be initially considered for this position. Preferred qualifications are in addition to the minimum requirements and are considered a plus factor in identifying top candidates.

Minimum Qualifications:

• Bachelor's Degree with 10+ years of experience or master's degree with 8+ years of experience in software engineering.
• 5+ years of experience in penetration testing or security validation of software products and services.
• Experience working with various software security testing techniques (e.g.: Fuzzing, cross site scripting, SQL injection) and tools (e.g.: OpenVas, OWASP Zap, Burp Suite, SonarQube).
• Test Automation using Python scripting at an Intermediate level
• Experience with SaaS and Cloud based products.
• Working knowledge of public clouds, IaaS, PaaS and Kubernetes.
• Excellent communication and collaboration skills, with ability to interact with stakeholders at all levels of the organization.
• Fast learner, having a growth mindset, ability to deal with ambiguous situations and possessing continuous innovation skills.

Preferred Qualifications:

• Security certifications such as CISSP, CCSP, CompTIA Security+ are a plus.
• Experience in key security concepts like cryptography, data encryption, key/certificate management, identity, security, and access management are highly preferred.
• Requirements listed would be obtained through a combination of industry relevant job experience, internship experiences and or schoolwork/classes/research.