Lead Security Engineer, Virtualitics

• 7+ years of experience in the field of Application Security, Product Security, Security Engineering or related security roles
• A deep understanding of application architecture and design principles, ability to effectively identify vulnerabilities across multiple programming languages
• Development or software engineering experience and proficiency with one or more high-level programming languages and frameworks (e.g. Python, JavaScript, C#/.NET, Flask, React, Blazor etc.)
• Strong knowledge of one or more cloud service providers (e.g. AWS, GCP, Azure), and technologies including Docker, Kubernetes, etc
• Demonstrated experience collaborating with product managers and engineers to infuse security throughout the development lifecycle
• Demonstrated experience integrating common security tools (Wiz, Snyk, Github Advanced Security, etc) with vulnerability management and ticketing platforms
• Security clearance may be required
• Communication
• Technical Leadership
• Self-driven

Desirable

• Build a deep understanding of Virtualitics’s software development life cycle, software supply chain, build pipelines, delivery mechanisms and configuration management
• Manage third-party vulnerabilities and implement a process to track them from discovery to resolution within required SLAs
• Enhance our SDLC program while serving as a subject matter expert regarding secure development and deployment practices
• Drive implementation and usage of engineering security tools - static, dynamic code analysis, dependency checks, container scanning, and code licensing compliance
• Provide mentorship and guidance to team members and foster a positive team culture