Senior Information Security Engineer, Accela

• 8+ years in information security, including 4+ years in application security
• 3+ years of experience in cloud environments (Azure or AWS), with a focus on application and container security
• Deep knowledge of SAST, DAST, and SCA tools and remediation strategies
• Strong grasp of OWASP Top 10, SANS Top 25, and secure development principles
• Proven ability to guide engineering teams through vulnerability remediation
• Excellent analytical and communication skills
• Experience with threat modeling and risk assessment
• Familiarity with Azure DevOps, GitHub, and CI/CD tools

Desirable

• The Senior Information Security Engineer will focus on identifying, analyzing, and mitigating application security vulnerabilities across Azure-hosted environments
• This role is responsible for supporting engineering teams in remediation efforts, maintaining vulnerability management processes for SAST, DAST, and SCA, and providing strategic guidance on secure development practices
• The Senior Security Engineer will serve as a key resource in application security, ensuring alignment with OWASP standards and container security best practices
• Analyze results from SAST, DAST, and SCA tools, and deliver clear, actionable remediation guidance to engineering teams
• Collaborate with developers to resolve vulnerabilities and promote secure coding practices
• Develop and maintain security guidelines aligned with OWASP Top 10, SANS Top 25, and other leading frameworks
• Conduct threat modeling and application-level risk assessments
• Provide expertise on container security in Azure, including secure configurations and runtime protections
• Track and manage remediation efforts to ensure timely resolution of vulnerabilities
• Build and maintain robust vulnerability management processes for Azure-hosted applications and services
• Partner with DevOps to embed security controls into CI/CD pipelines
• Create security documentation such as remediation playbooks and advisory reports
• Lead penetration testing initiatives and coordinate follow-up actions
• Support incident response efforts related to application vulnerabilities
• Oversee the organization’s vulnerability management program, ensuring comprehensive coverage and effective risk mitigation