Senior Application Security Engineer, Cyberhaven

• The ideal candidate can come from either a security background (preferably DevSecOps) or a product-development background, and will work to support both
• 5+ years of software development experience, ideally with exposure to information security or AppSec
• Strong grasp of secure coding, threat modeling, and vulnerability management across the SDLC
• Proficient in Go, Python, or Java, and experienced with CI/CD pipelines and GitHub
• Hands-on with security tools and frameworks (SAST, DAST, SCA—e.g., Snyk, Semgrep, OWASP ZAP, Burp)
• Understanding of core Information Security capabilities such as: malware, vulnerabilities, exploits, attacks, firewalls, intrusion detection/prevention systems, etc
• SME in at least one of the following: Threat and Vulnerability Management, Incident Response, Threat Hunting/Red Teaming, or Penetration Testing
• Able to interpret and prioritize security data, partnering effectively with developers to remediate issues
• Strong communicator who can influence and collaborate across engineering and security teams

Desirable

• Cyberhaven is seeking a passionate cyber security professional who understands the value of identifying and removing threats or vulnerabilities in the environment
• The Senior Application Security Engineer will be responsible for the day-to-day work of partnering the Cybersecurity-Vulnerability Management with the Development and Engineering organizations
• They will ensure optimal implementation of our scan tools and update configurations as the environment changes
• In this role, they are responsible for identifying security threats facing the company from the operations and product development
• The Engineer will build meaningful relationships with teams in multiple Cyberhaven engineering teams to drive the vulnerability remediation effort
• They will participate in the implementation, execution, metrics, and sustainability of program objectives that allow security operations to continuously improve our ability to detect and protect our world-wide footprint from vulnerabilities and threats
• Perform Security Assessments: Conduct regular security assessments, code reviews, and penetration testing to identify vulnerabilities in applications and software
• Develop / Implement Security Tools: Design, develop, and implement security tools, frameworks, and methodologies to protect applications against security threats
• Collaborate with Development Teams: Work closely with development teams to ensure security best practices are integrated throughout the software development lifecycle (SDLC), including secure coding guidelines
• Threat Modeling and Risk Assessment: Conduct threat modeling and risk assessments to proactively identify potential risks and develop mitigation strategies
• Vulnerability Management: Supporting role to track, analyze, and manage vulnerabilities in applications, providing guidance and support for remediation efforts
• Incident Response Support: Assist in investigating, analyzing, and responding to security incidents related to applications, ensuring timely resolution and documentation of incidents
• Stay Current on Security Trends: Continuously stay updated on the latest security threats, vulnerabilities, and technologies to enhance security measures in applications