Application Security Engineer, Synthesia

• You have a passion for security engineering and you want to share this passion with as many like-minded colleagues as possible. You have worked for 2-3 years in an Information Security team, or you have championed security within engineering teams, you a proponent of DevSecOps and you want to deal with interesting problems
• Web application security principles and have worked hands-on with the OWASP Top 10, the OWASP ASVS or the CWE Top 25
• Working with a Secure Development Lifecycle model (e.g. OpenSAMM, BSIMM)
• Software development (we use Python and TypeScript, running on Docker)
• Working with vulnerability assessment / management tools (e.g. Wiz, Snyk, SynAck)
• Working within the context of an Information Security framework (e.g. ISO 27001, SOC 2, PCI DSS)
• Working with security in the cloud (we are on AWS)
• Working with Github

Desirable

• Establishing an Application Security Champions program
• Facilitating the integration of security tools with the development pipeline
• Running and scaling security activities such as threat modeling, code scanning, web app scanning, threat detection, and architectural and code reviews
• Providing subject matter expertise on topics such as secure design, security controls, programming practices, encryption, and web security standards
• Leading vulnerability management and exposure assessments when vulnerabilities are discovered
• Implementing or assisting in the implementation of security-related product features