Senior Security Engineer, Skedulo

• Proven experience in application security related fields
• Sound understanding of OWASP top 10 and CWE top 25 and how to mitigate them
• Hands on experience implementing DevSecOps practices, and Static and Dynamic Analysis tools
• Familiar with architecting secured modern cloud environments
• Familiar with integration platforms
• 3-5 years in information security role (e.g., SOC, Incident Response, Penetration Testing, Security Engineering)
• Formal education in Computer Science, Information Technology, Cybersecurity. Experience in lieu of formal education is acceptable.
• Thorough understanding of threat modeling and risk evaluation as it pertains to SaaS, and the ability to execute mitigation strategies.

Desirable

• Security architecture and implementation – provide hands-on security posture and insights on modern cloud-based application architecture, containerisation, and security best practice. Lead and contribute to the planning, design, and implementation of strategic, cross functional cybersecurity controls.
• Proactive vulnerability resolution - work with engineering teams to determine whether an identified vulnerability is a problem or is mitigated by existing controls (and configure the vulnerability management tool to silence the alarms), and action paths to remediation (typically a pull request that solves the problem)
• Incident Management – accountable for security incident response, which includes post incident reviews and remediation activities to prevent recurrence wherever possible. Provide expert advice and continuously improve incident management procedures.
• Support, Assist and Advise – provide support to business units to ensure optimal use and application of cybersecurity processes and controls. Consultation with key stakeholders to ensure cybersecurity policies remain aligned with stakeholder requirements.
• Security Culture – assist with mentoring and directing development team members to deliver quality solutions and support the growth and development of security culture across the team.
• Secure Development Lifecycle – play a critical role in supporting a Secure Development Lifecycle by embedding innovative security solutions within an agile development pipeline and operational environment. Advise developers on best practices and standards.