Application Security Engineer, Kraken.tech

• If you’re passionate about AWS technologies and driving security by design, we encourage you to apply!
• A strong technical security background
• Technical understanding of topics related to SAST, DAST, SCA, Secret Scanning, IAST, fuzzing, and SDLC hardening
• Firm capability of conducting end-to-end security assessment of an application
• Multiple years of experience working with cloud technologies, preferably with a security focus. We work with AWS, but we understand the skills are transferable
• Strong experience in implementing and automating security best-practices
• Proficient with DevOps methodologies such as CI/CD, version control (we use GitHub) and full-stack repeatability
• Experience working with teams around the globe
• Ability to prioritise tasks and work independently
• Experience working with infrastructure as code tools such as CloudFormation, Terraform and CDK

Desirable

• We are seeking an experienced Application Security Engineer that will become a member of newly formed security team within KrakenFlex
• You’ll play a crucial role in securing our software development processes, integrating security practices, and shaping a culture of security
• This is a creative, and collaborative position that is a full-time member of an AWS-focused, agile engineering organisation
• The role will work closely with our development and platform teams, to help them following crucial security principles and industry best practices
• Automation of security controls, security hardening of the developer and IaC processes (building, testing, release), supply chain security (part of the build process), related metrics and monitoring/audits
• Develop robust and secure CI/CD pipelines, and manage integrated security tooling (SAST/DAST/SCA)
• Actively contribute to addressing security findings by helping teams to create a comprehensive mitigation plans
• Help achieving Shift Left in our software development lifecycle by closely working with our product teams
• Organising and performing penetration testing of our products, and collaborating with external parties on those tests
• Act as a technical security professional, providing advice and guidance to other team members
• Contribute technical decisions to develop platform and security engineering roadmaps
• Help cultivate a strong technical security culture across the company
• Setup and maintain monitoring, metrics & reporting systems for our security tooling to achieve fine-grained security observability and actionable alerting