Senior Application Security Engineer (REMOTE)

Company: Veeam Software
Location: Alpharetta
Posted on: November 18, 2022

Job Description:

ResponsibilitiesReporting to the VP, Cyber Security Architect, this position is responsible for ensuring every step of the secure software development lifecycle follows security best practices and our products are secure. As a Senior Application Security Engineer, you will deliver technology and processes that verify and validate that all of Veeam's products follow application security best practices. You will participate in application security reviews and develop and perform in-depth product security testing across all of our products. You will help pick commercial security tools to use in the testing process as well as help develop custom security tools for testing. You will work closely with the Research and Development team to provide feedback on vulnerabilities and best practices.Participate in and support application security reviews.Verify and validate all commercial products meet or exceed security requirements.Review existing threat models and write new threat models for all commercial products.Perform application security vulnerability management.Help set up and support a bug bounty program.Assist in the development of manual automated security testing to validate that secure coding best practices are being used.Test the software products developed by the Company for security vulnerabilities.Support and consult with product research and development teams in the area of application security.Assist in the creation of security training.QualificationsStong understanding of application security concepts.Understanding of SAST, DAST, and IAST tools such as Checkmarx, Veracode, Synopsys, etc.Strong understanding of secure coding practices.---Familiarity with common security libraries, security controls, and common security flaws (OWASP, SANS, CIS, etc.).Experience C# and c++ programming languages required.Experience with other programming languages such as Java and Python, and scripting languages such Powershell and Bash desired.Experience developing applications.Building infrastructure as code using tools like Terraform, Cloudformation, Ansible, etc.Seven to ten years of experience as a practicing IT Professional.Understanding of application security concepts and engineering.Industry certification. CSSLP or CASE .NET preferred. CISSP, CSSP, etc., also acceptable.Technical writing experience.Application testing, fuzzy testing, binary analysis, white, black, and grey box security and penetration testing.Multi-tier and Full stack development - UI, web/application, database, and various operating systems (Windows, Linux/Unix, Mac)REST and SOP API development and securityDevOps tools and practicesTeam player: work across an organization to build a plan, get alignment and executeBS/MS degree in Computer Science or equivalent field experience - a combination of education and experience will be consideredRemote: Comfortable working remotely in a distributed, highly-effective global teamMust be eligible for a security clearance with the Department of State.#LI-TS1Veeam Software is an equal opportunity employer and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential.

Keywords: Veeam Software, Alpharetta , Senior Application Security Engineer (REMOTE), Engineering , Alpharetta, Georgia