Role OverviewAgileEngine is an Inc. 5000 company that creates award-winning software for Fortune 500 brands and trailblazing startups across 17+ industries. We rank among the leaders in areas like application development and AI/ML, and our people-first culture has earned us multiple Best Place to Work awards.
What You Will Do
- Deploy and tune code scanning solutions such as SAST, DAST, and IAST. - Interpret code scanning results to ensure the team is focused on remediation of the highest-risk vulnerabilities. - Perform threat modeling of applications to identify potential threat vectors in the technology stack that could be used by attackers and cause disruption or a potential data breach.
Why It Might Be a Fit
Must be able to prioritize true security risk, reduce scanner noise, and drive timely remediation of meaningful vulnerabilities. Collaborative, solutions-oriented approach; must be able to build trust with development teams and improve security without unnecessarily slowing product delivery.
Requirements
- Authorized to work for ANY employer in the US
- Strong hands-on Application Security experience in a modern software-development environment of at least 4 years
- Software engineering foundation with the ability to read, understand, and discuss code in Python, JavaScript, Java, or similar languages
- Deep experience deploying, tuning, and interpreting SAST and DAST tools; IAST experience is a plus
- Demonstrated experience conducting threat modeling and translating findings into practical security requirements
- Experience integrating security testing and controls into CI/CD pipelines and developer workflows
- Working knowledge of AWS/cloud application security, APIs, authentication/authorization, secrets management, and common web-application vulnerabilities
- Experience with infrastructure-as-code and automation tools such as Terraform, CloudFormation, Ansible, Puppet, Chef, or Salt
- Upper-intermediate English level
Benefits
- Professional growth
- Competitive compensation
- A selection of exciting projects
- Flextime
]]>