Seeking a highly-skilled Staff Security Engineer to work remotely, who will manage the security and integrity of applications and software systems, build a vulnerability management pipeline, and execute the application security program while collaborating closely with engineering teams.
Key responsibilities
Own the configuration, tuning, and management of the SIEM solution, diagnosing unusual threats and developing alerts for security incidents Conduct architecture, code, and infrastructure configuration reviews, performing penetration testing to identify and resolve vulnerabilities Maintain and optimize a vulnerability management CI/CD pipeline, partnering with development and infrastructure teams to enforce secure coding practices Required qualifications Proficiency in one or more programming languages such as Ruby, Java, Python, C#, or Node.js Expertise in managing SIEM solutions with a focus on effective alerting Strong knowledge of Docker and Kubernetes, with experience in automated container vulnerability management Mastery of SAST, DAST, and IAST tools, along with manual validation testing skills Deep understanding of security principles, including OWASP Top 10 and secure coding practices
Experience: 8 years required