Application Security Engineer

About NCR VOYIX

NCR VOYIX Corporation (NYSE: VYX) is a leading global provider of digital commerce solutions for the retail, restaurant and banking industries. NCR VOYIX is headquartered in Atlanta, Georgia, with approximately 16,000 employees in 35 countries across the globe. For nearly 140 years, we have been the global leader in consumer transaction technologies, turning everyday consumer interactions into meaningful moments. Today, NCR VOYIX transforms the stores, restaurants and digital banking experiences with cloud-based, platform-led SaaS and services capabilities.

Not only are we the leader in the market segments we serve and the technology we deliver, but we create exceptional consumer experiences in partnership with the world s leading retailers, restaurants and financial institutions. We leverage our expertise, RD capabilities and unique platform to help navigate, simplify and run our customers technology systems.

Our customers are at the center of everything we do. Our mission is to enable stores, restaurants and financial institutions to exceed their goals - from customer satisfaction to revenue growth, to operational excellence, to reduced costs and profit growth. Our solutions empower our customers to succeed in today s competitive landscape.

Our unique perspective brings innovative, industry-leading tech to all the moving parts of business across industries. NCR VOYIX has earned the trust of businesses large and small from the best-known brands around the world to your local favorite around the corner.

Application Security Engineer

GURGAON, India

In this mission critical role as an Application Security Engineer, you will be part of a dynamic global application security team, working directly with software architects and software engineers to perform penetration testing on software solutions developed within the company. In addition, you ll collaborate with engineering to triage security findings and review remediation techniques in order to harden and improve the security of NCR Voyix software across multiple types of products.

With NCR Voyix as a software-focused company, you ll work in a fast-paced environment, helping enable teams to work in a DevSecOps model in a world of containers, automated pipelines, and rapid deployments. And you ll be instrumental in helping teams add in security testing as part of their build and release pipelines. NCR Voyix produces hardware and software for major companies in Retail, Restaurants, and Digital Banking - come help secure the state-of-the-art!

Responsibilities:

• Conducting manual penetration tests of NCR Voyix software
• Assessing risk level of security findings using standard methodologies
• Running automated application security tools
• Writing and presenting pen test reports to development teams
• Consulting with development teams on remediation techniques and defensive coding
• Validation testing to confirm findings are closed
• Develop, integrate, and enable security engineering test automation into a CI/CD pipeline
• Perform proof-of-concept and proof-of-technology testing for integrating new 3rd party security products into the development and deployment processes

Required skills and experience:

• Bachelor s Degree in Computer Science or related field - equivalent work experience ok
• At least 2 years of experience of Application pen testing background

• Web application test experience
• Web services/API test experience

• Mobile application test experience (iOS and Android)
• Soft skills - effective communication (internal, customer, legal counsel), collaboration (internal, external) and effective written skills (white papers, vulnerability specifications etc.)

Preferred Skills and Experience:

• Experience with automation of security testing as part of a CI/CD pipeline
• Experience with retail, banking, and/or restaurant software, particularly the types of vulnerabilities and security testing associated with them.
• Previous hardware/POS pen test experience
• Active participation in cybersecurity forums/conferences, e.g. DEFCON, Black Hat.
• Experience with privacy requirements of a global corporation (e.g. GDPR, CCPA)
• Security industry certifications, e.g. CEH

Offers of employment are conditional upon passage of screening criteria applicable to the job

EEO Statement

Integrated into our shared values is NCR Voyix s commitment to diversity and equal employment opportunity. All qualified applicants will receive consideration for employment without regard to sex, age, race, color, creed, religion, national origin, disability, sexual orientation, gender identity, veteran status, military service, genetic information, or any other characteristic or conduct protected by law. NCR Voyix is committed to being a globally inclusive company where all people are treated fairly, recognized for their individuality, promoted based on performance and encouraged to strive to reach their full potential. We believe in understanding and respecting differences among all people. Every individual at NCR Voyix has an ongoing responsibility to respect and support a globally diverse environment.

Statement to Third Party Agencies
To ALL recruitment agencies: NCR Voyix only accepts resumes from agencies on the preferred supplier list. Please do not forward resumes to our applicant tracking system, NCR Voyix employees, or any NCR Voyix facility. NCR Voyix is not responsible for any fees or charges associated with unsolicited resumes

When applying for a job, please make sure to only open emails that you will receive during your application process that come from a @ncrvoyix.com email domain.