Senior Application Security Engineer, Revizto
More information about location
BIM collaboration software for AECO teams
Open for applications
BIM collaboration software for AECO teams
201-500 employees
Open for applications
More information about location
201-500 employees
Company mission
To change how collaboration happens in the AECO industry, helping teams deliver complex projects on time and on budget.
Role
Who you are
- 5+ years of experience in Application Security or a similar security engineering role
- Hands-on experience with SAST/DAST/IAST/RASP tooling, especially Snyk and/or Acunetix
- Practical experience with vulnerability management and threat modeling methodologies such as STRIDE and PASTA
- Experience launching or operating a bug bounty program
- Experience conducting penetration testing or collaborating closely with pentest teams
- Strong knowledge of OWASP standards (ASVS, WSTG, Top 10) and secure SDLC principles
- Experience securing APIs, including REST and GraphQL
- Ability to read and understand code across multiple languages including PHP, JavaScript, Go, C#, and C++
- Familiarity with Unity-based desktop/mobile applications is a strong plus
- Broad understanding of application and infrastructure security concepts
- Comfortable working cross-functionally with engineering teams in a collaborative environment
Desirable
- Security certifications such as OSCP, GWEB, or CSSLP
- Experience with Unity or game engine security
- Familiarity with cloud security concepts in AWS or AliCloud
- Experience integrating security tooling into CI/CD pipelines (GitHub Actions, etc.)
- Experience building or scaling a Security Champions program
What the job involves
- We are looking for a Senior Application Security Engineer to join our security team and help further mature our application security program. In this role, you will be strengthening secure development standards and embedding security deeper into the software development lifecycle (SDLC)
- You will work closely with development, DevOps, and DevSecOps teams to improve existing practices, introduce scalable security controls, and help make security an integral part of how we build and ship software
- Working with and improving tools such as SAST, DAST, IAST, and RASP
- Managing application vulnerabilities and remediation workflows
- Reviewing open-source dependencies and improving SCA/OSA practices
- Performing and improving secure code review processes
- Strengthening API security across REST and GraphQL services
- Conducting threat modeling exercises (STRIDE, PASTA, etc.) for new features and systems
- Launching and operating a bug bounty program
- Building and scaling a Security Champions program across engineering teams
- Partnering with external vendors on penetration testing engagements
- Helping improve secure SDLC practices, standards, and developer guidance
- Sharing security knowledge and promoting security awareness across the organization
Our take
Building and engineering projects are undertaken by personnel from a variety of skill sets, and with an integrated platform that coordinates them, time can be recovered and money can be well spent. Revizto’s integrated collaboration platform was designed for the construction, architecture and engineering industries, and helps teams to connect from across separate sectors of a company.
Founded in 2012, Revizto’s platforms utilize gaming technology and cloud solutions to provide all teams across a project with 3D and 2D workflows, ensuring swift and clear communication and a unified environment. The company is certainly not the only workflow product on the market. Still, its focus on the Architecture, Engineering, Construction and Operation (AECO) sectors carves out a niche that has helped it become one of the fastest-growing collaboration platforms.
Minority investment from Summit Partners was announced in 2024 and came at a time when Revizto was experiencing strong forward momentum. Its latest release is a phone app leveraging augmented reality and QR code functions and an award for being one of Switzerland’s Best Managed Companies further underlines its accelerated growth.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- Flexibility: Remote-first culture in a flexible, dynamic, and innovative work environment.
- Rewards: Competitive compensation, bonuses, and industry-leading benefits.
- Growth: Shape the future of Revizto. Contribute and grow professionally.
- Innovation: Work with the technology and people at the forefront of revolutionising the AECO industry.
- Community: A connected culture, online and in-person, with opportunties to travel.
- Mastery: Learn with industry-leading AI and technology that elevates your work.
Company HQ
Lausanne, VD
Leadership
Arman Gukasyan
(Founder & CEO)Prior to founding Revizto in 2008, Arman was the CEO at Informap Group. He was also a Marketing COnsultant at Franck Muller USA.
Share this job
View 5 more jobs at Revizto