Senior Security Engineer, SonarSource
Code quality management platform
Posted today
Code quality management platform
501-1000 employees
Posted today
501-1000 employees
Company mission
To enable developers and development teams to write clean code and remediate existing code organically, so that they can focus on the work they love and maximize the value they generate for businesses.
Role
Who you are
- Extensive experience with Cloud architectures including AWS and GCP
- Extensive experience with CI/CD platforms
- Experience with application security assessment methods and reviews including authentication and authorization
- Experience with threat modeling using frameworks like STRIDE
- Pen-Testing experience
- CVE investigation and management
- End-point security such as CrowdStrike and CyberArk
- Cloud network and firewall management
- Azure platform and Google Workspace experience are a plus
- You are a curious person by nature
- You are a friendly, enthusiastic, and an organized team player
- You actively share your knowledge and give and receive feedback, to improve the team and yourself
- Ability to clearly identify the problem to be solved and articulate it before working on the solutions
- You have experience working on cross-team projects across a global organization
- You are fluent in Written and spoken English
What the job involves
- As a member of the Information Security team, you will work with the engineering teams to ensure products and cloud platforms are designed, built, and maintained to Sonar’s high security standards and assist them through constant improvement
- You will also ensure endpoints are fully secure and meet our engineers' needs while procuring and deploying new solutions
- You will investigate and resolve security issues raised with our team. As part of a team-based organization, your contributions will significantly impact the growth of our business through Sonar’s “collective intelligence” mindset
- Develop and deliver security initiatives through the Strategic Security Plan
- Procure, design, and implement new security tools and features
- Work with the engineering teams to design and implement security solutions for products
- Run internal and external security reviews and pen-testing campaigns
- Investigate and resolve security issues in products and internal systems
- Review engineering product architecture and solutions to ensure integration of security requirements
- Investigate and manage CVE and cloud platform configuration
- Manage and adjust cloud networks and firewalls
Our take
It has been reported that bug-prone software costs enterprises close to $3 trillion every year, and with developers now handling higher volumes of code than ever, SonarSource’s products automatically ensure that only clean code is embedded when they update software.
The company was founded in Switzerland in 2008, and has become the market leading platform for code quality control. While its first decade was encouraging, the period from 2018 and today has been an astounding period of hyper growth.
It has earned Unicorn status, opened up offices across Europe, as well as in the US and Asia, and counts the likes of Nasa, Microsoft, and IBM amongst its customer base. Indeed, the vast majority of the Fortune 100 use SonarSource.
With its position at the head of the market established, SonarSource is aiming to expand its headcount and continue its momentum, especially in the US and Asia-Pacific, where the tech industry is booming
Freddie
Company Specialist at Welcome to the Jungle
Insights
39% employee growth in 12 months
Company
Funding (2 rounds)
Apr 2022
$412m
LATE VC
Nov 2016
$42.8m
LATE VC
Total funding: $454.8m
Company benefits
- Safe work culture - we value respect, kindness, and the right to fail.
- Flexible hours - we schedule our days in order to be effective at work, while also being able to enjoy life’s important moments.
- Great people - we value people skills as much as technical skills and strive to keep things friendly and laid back. Still, that does not prevent us to be passionate leaders in our domains. Our 300+ SonarSourcers from 33 different nationalities can relate!
- Work-life balance - keeping a healthy work-life balance is important. This is why we have a hybrid work policy and some people prefer working some days from home.
- Always keep learning - in an ever-changing industry, learning new skills is a must, and we're happy to help our team to acquire them.
Company values
- Continuous innovation: Our R&D teams continuously innovate to make it easier for all developers to deliver clean code.
- Continuous feedback: Community inputs help us build new features that are impactful and valuable to users.
- Continuous enhancements: To strive to continuously improve and enhance existing features to provide more value to customers.
Company HQ
Vernier, GE
Articles
Leadership
Olivier Gaudin
(CEO)Co-founded SonarSource in 2008 alongside Freddy Mallet and Simon Brandhof, who have since moved on. Previously worked at JP Morgan and Deutsche Bank, before becoming Head of Development at Marketing Services company CIFEA DMK.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 51 more jobs at SonarSource