Products and Solution Security Expert (PSSE)

The SaaS Security Operations Team is key to ensuring the security and operational efficiency of our SaaS organization. We are looking for a dynamic professional to join our international SecOps team as Offensive Security Engineer and to be one of the guardians of the software value. You will play a meaningful role in identifying and addressing potential security threats through advanced threat modeling (eg, STRIDE methodology) and conducting thorough penetration testing across our systems, applications, and infrastructure. This role will play a key part in proactively safeguarding our perimeter and enhancing our security posture.

You ll make a difference by:

Proactive in your day-to-day work and engaged with multiple teams, you are a strong teammate and creative problem solver who can work with multi-cultural, dispersed technical teams and contribute to the success of our solutions by:

• Performing Threat Modeling using frameworks like STRIDE to identify, prioritize, and mitigate potential security risks.
• Collaborating with development and infrastructure teams to integrate threat modeling into the design and development lifecycle.
• Conducting penetration testing on applications, APIs, and infrastructure to uncover vulnerabilities and exploit paths.
• Analyzing vulnerabilities reported from automated tools or third parties to assess their exploitability and potential impact.
• Supporting the resolution of security incidents, including RCA, containment, and recovery in collaboration with the wider security organization.
• Creating and maintaining a library of test cases and attack simulations for continuous testing.

You ll win us over by:

• We would love to hear from you if you are an engineering degree or equivalent, and have a successful experience in the field of cybersecurity:
• You have proven experience in offensive security, penetration testing, or ethical hacking.
• You have a strong background in performing STRIDE or other threat modeling methodologies.
• You have demonstrated ability to uncover vulnerabilities in complex applications and infrastructures.
• You are proficient in penetration testing tools like Burp Suite, Metasploit, Nessus, or Nmap.
• You have Knowledge of scripting languages such as Python, Bash, or PowerShell for creating test scenarios and tools.

You can understand complex products, solutions, and issues and are able to report consistently, concisely, and effectively on our SaaS Security posture to the various stakeholders allowing for management prioritization, investment, and reporting.