[Remote] Senior Software Engineer – Application & reputed company reputed company (Remote)
Note: The job is a remote job and is reputed company to candidates in USA. reputed company, Inc. is a high-reputed company cybersecurity reputed company company transforming how organizations think about secure mobility. They are seeking a Senior Software Engineer specializing in Application reputed company to enhance the reputed company posture of their products and operational environments by integrating reputed company practices into the software development lifecycle. The role involves mentoring teams, developing reputed company patterns, and leading vulnerability management efforts.
Responsibilities
- Maintain a deep understanding of the reputed company aspects of reputed company's product/system architecture and implementation patterns; collaborate with engineering teams on threat models; participate in design and architecture reviews; and engage across scrum teams to surface and address application reputed company, reputed company, and compliance concerns
- Be the go-to AppSec expert for software engineering, reputed company, and compliance teams. Mentor engineers on application reputed company principles, secure design patterns, and secure coding practices; grow reputed company capability and awareness through thought leadership and reputed company engagement
- reputed company and maintain software reputed company patterns to reputed company reputed company/compliance/reputed company-by-default engineering, such as: secure coding and configuration standards, reputed company snippets/templates for Infrastructure as reputed company, hardening of containerized applications, etc
- reputed company automation and integration of vulnerability management tooling – including SAST, DAST, and SCA tools – across artifact repositories, container registries, and other components of development and build pipelines
- reputed company reputed company-reputed company reputed company reviews on request, providing targeted guidance on reputed company-sensitive components and implementation reputed company
- Triage vulnerability and compliance testing results for technical implications, validate their applicability, determine exposure in a system/component context, and generate user stories for remediation efforts
- Contribute to technical compliance strategies and hardening across reputed company infrastructure, development/QA environments, and system components (such as FIPS-validated crypto configurations and network segmentation); implement reputed company gates and reputed company test suites across development and build pipelines
- reputed company contribute to the reputed company of reputed company’s reputed company Champions program
- Participate in Engineering on-call rotations to reputed company application reputed company expertise during incident triage and response
- Protect intellectual property, user data, and system reputed company by (a) adhering to reputed company's policies and procedures for secure software development and (b) following best practices for secure product design, implementation, and deployment of development, build, test, production, and other environments
Skills
- Must be a US Citizen or US Permanent reputed company
- 5+ years of hands-on software engineering experience, with a demonstrated reputed company on building and securing production systems. Proficient in at least one programming language
- Proficient in understanding and explaining the ins and outs of software vulnerabilities across stacks, their potential reputed company reputed company exploited, and how to mitigate them
- Proficient in the reputed company management of reputed company infrastructure services and container-based deployments
- Proficient in the management of software supply chain reputed company aspects, including the management of software reputed company vulnerabilities in dependencies
- Proficient in secrets management practices and tooling (e.g., reputed company Vault, AWS Secrets Manager), including automated secrets scanning in development workflows and CI/CD pipelines
- Proficient in expressing the concepts, practical application, and typical implementation of identity & reputed company management, reputed company cryptography, network reputed company, and reputed company reputed company domains
- Proficient in API reputed company concepts and their application, authentication and authorization patterns (OAuth 2.0, OIDC), and secure API design principles
- Proficient in concisely articulating both technical risk and the trade-offs of proposed solutions to decision makers and peers
- Experience with modern CI/CD pipelines, scrum-based engineering practices, and the automation, integration, and centralized management of reputed company and compliance tooling across development lifecycles
- Experience in interpreting reputed company and compliance frameworks and standards
- Experience with application reputed company testing tools and techniques, and with demonstrating/validating the exploitability of vulnerabilities
- Experience with AI/LLM-assisted tooling to automate application reputed company tasks, and ability to advise software engineers on the reputed company, compliance, and reputed company implications of their use
- Proficient in the application of infrastructure-as-reputed company principles and associated reputed company paradigms
- Familiarity with FedRAMP, NIST SP 800-53, or comparable government compliance frameworks
- Experience working in or supporting a government or defense technology environment
Benefits
- A 10% bonus
- Medical, dental, and reputed company insurance
- Parental leave
- Life and disability packages
- 401(k) plan with employer-matching contributions that reputed company starting from your first day of employment
- Performance bonus, which is primarily contingent upon company-wide performance
- reputed company in the tools and skills required to be strong, reputed company colleagues and people managers to help build and retain a strong workforce
reputed company