Staff Application Security Engineer, Ivanti
+ Equity
IT service and asset management software
Be an early applicant
IT service and asset management software
1001+ employees
Be an early applicant
+ Equity
1001+ employees
Company mission
To elevate human potential within organizations by managing, protecting and automating technology for continuous innovation.
Role
Who you are
- Over 8 years of experience in web application security, with deep technical knowledge of both common and advanced security vulnerabilities, exploitation techniques, and practical remediation strategies
- Proven expertise in applied cryptography, threat modeling, vulnerability assessment (including CVSS scoring and penetration testing), as well as secure software development practices across SSDLC and CI/CD pipelines
- Experience implementing and maintaining security tools and processes for large-scale codebases (such as SAST, SCA, DAST, container scanning), and providing secure coding education to developers
- Strong programming skills (preferably in Python), with the ability to explain complex security topics clearly to diverse technical and non-technical stakeholders
- Demonstrated ability to work cross-functionally in collaborative environments, contributing to responsible disclosure, bug bounty, and vulnerability management programs, as well as securing cloud and SaaS environments at scale
What the job involves
- At Ivanti, you will play a pivotal role in shaping the future of secure digital work by designing and enhancing world-class products used across the globe
- Join our dynamic, collaborative team and make a meaningful difference—helping organizations thrive securely in a fast-paced, ever-evolving digital landscape
- Your expertise will help safeguard countless users, while empowering innovation at every level
- As a Staff Security Engineer at Ivanti, you play a crucial role in safeguarding our products and users against evolving threats
- Your work ensures trust and resilience in our technology, helping organizations worldwide operate securely and innovate with confidence
- Manage the integration of security best practices throughout all phases of the software development lifecycle, ensuring robust protection of Ivanti’s products, services, and IT assets
- Build innovative and scalable security tools, processes, and solutions to proactively detect, remediate, and mitigate vulnerabilities across large and complex codebases
- Design secure architectures, perform comprehensive threat modeling, and lead penetration testing and code reviews on both web and mobile applications to maintain the highest levels of security
- Partner with development, operations, and architecture teams to deeply embed security into DevOps practices and foster a culture of continuous security awareness throughout the organization
- Lead security education initiatives by delivering clear, actionable training and documentation to cross-functional teams, and by driving vulnerability remediation efforts with stakeholders of varying technical backgrounds
- Collaborate with global product and engineering teams, business leaders, and third-party security vendors to interpret vulnerability reports and coordinate effective security solutions and disclosure programs
- Advise stakeholders on prioritizing vulnerabilities, implementing secure coding standards, applying cryptographic techniques, and adopting industry-leading security protocols and compliance practices
Our take
Ivanti, a well-established leader in IT and asset management solutions, has evolved significantly since its founding as LAN Systems in 1985. After merging with HEAT Software in 2017 to become Ivanti, the company has continued to grow by acquiring smaller firms and expanding its reach and product offering.
Today, Ivanti is known for its flagship product, the Ivanti Neurons IT Platform, which uses machine learning to proactively detect and resolve IT issues. In addition, the company provides a range of cybersecurity solutions, including VPNs and real-time security surveillance, to help businesses safeguard their networks.
Despite facing challenges, including a data breach involving its subsidiary companies MobileIron and Pulse Secure, Ivanti has taken proactive steps to enhance security. In response to vulnerabilities that allowed hackers to exploit VPN systems, Ivanti has strengthened its security with zero trust models and Unified Endpoint Management tools to better protect its customers.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (2 rounds)
Jan 2005
$35m
SERIES B
Jan 2000
$5.6m
SERIES A
Total funding: $40.6m
Company HQ
South Jordan, UT
Leadership
Dennis Kozak
(CEO)Dennis joined Ivanti in 2022 as COO, moving into the role of CEO in 2025. Prior to Ivanti, he spent 3 years at Avaya as an SVP of Business Transformation and Strategic Operations, Global Cloud & Channel Sales. Before this, he spent 23 years at CA Technologies, holding various roles, including Senior VP.
Peter De Bock
(CFO)Prior to joining Ivanti in 2023, Peter was the Chief Administrative Officer at Inovalon. He also spent 28 years at CA Technologies, holding various roles, including SSVP of Financial Planning & Analysis and Chief Financial Planning Officer.
Share this job
View 13 more jobs at Ivanti