Product Security Engineer, Senior

Responsibilities

Provide guidance to teams on security best practices throughout the SDLC
Secure architectures and requirements
Threat modeling
Secure coding practices
Manual and automated code reviews
Analyze results from automated tools
Security assessments / white box testing
Join in regular security assessments of our products
Continually drive further maturity across TraceLink processes
Support efforts to address identifies security issues
Assist with maintaining, operating, and optimizing security testing tools such as SAST, SCA, and DAST
Maintain a high expertise level of the application security landscape and new threat vectors
Develop and support security needs of TraceLink s partner program

 

Skills and Qualifications

8 years experience with securing cloud-native applications
4 years experience with the application of threat modeling or other risk identification techniques
Strong knowledge of Application Security testing tools
Expert knowledge of OWASP Top 10, including avoidance and remediation techniques
Experience in remediating complex enterprise-level security issues
Strong knowledge of secure coding practices in both Java and JavaScript/NodeJS
Experience working with Agile/Scrum development methodology
Development experience with Java to maintain and enhance internal tooling
Experience automating tasks and analysis
Strong analytical and problem solving skills
Strong verbal and written communication skills
Knowledge of microservices architecture and supporting technologies
Bachelor s degree or equivalent experience in Computer Science, Information Systems Security, or related field
CISSP, CCSP, CEH, CSSLP, CKS, AWS Security, OffSec, SANS Security, and other industry and vendor-specific security certifications