AppSec Engineer I

2 мес. назад

BulgariaEuropeJuniorRemote

application securitysdlcvulnerability remediationsecurity testingcloudon-premises

Responsible for managing SDLC integrated application security testing tools, driving risk reduction and vulnerability remediation for applications.

Требования

Understanding of software security architecture and design
Broad experience of information security and AppSec testing techniques
Have practical experience in an application security role with manual testing
Solid understanding of cloud environments (GCP especially), web protocols, weaknesses and vulnerabilities
Good working knowledge of current IT risks and experience testing, exploitation and mitigation techniques
Working knowledge or experience with one or more of the following: Shell, Java, Python, or Node.js
Experience developing automation and exploitation scripts 
Experience or strong interest in penetration testing, including cloud deployed applications
Ability to interact with a broad cross-section of personnel to explain security vulnerabilities
Highly curious and dedicated to continuous learning
Excellent written and verbal communication skills 
Benefits:  
Health: medical, dental, and vision
Time away: 28 vacation days
Development: Generous tuition reimbursement and access to internal professional development resources. 
Additional: Food Vouchers.
#LI-Remote

Другое

(NASDAQ: LPSN) is the global leader in enterprise conversations. Hundreds of the world’s leading brands — including HSBC, Chipotle, and Virgin Media — use our award-winning Conversational Cloud platform to connect with millions of consumers. We power nearly a billion conversational interactions every month, providing a uniquely rich data set and safety tools to unlock the power of Conversational AI for better customer experiences.  
At , we foster an inclusive workplace culture that encourages meaningful connection, collaboration, and innovation. Everyone is invited to ask questions, actively seek new ways to achieve success, nd reach their full potential. We are continually looking for ways to improve our products and make things better. This means spotting opportunities, solving ambiguities, and seeking effective solutions to the problems our customers care about. 
The AppSec team at is responsible for testing the security of applications and environments, on-premises and cloud.  All of our AppSec team members are expected to have a thorough understanding of complex IT systems and stay up to date with the latest security vulnerabilities, standards, systems and protocols, as well as testing tooling and methodologies. 
This role manages SDLC integrated application security testing tooling and integrations, drives risk reduction and vulnerability remediation and assists in the closing of discovered vulnerabilities and weaknesses.
The right candidate will have a can do, follow-up and follow through attitude. They will be able to understand and assess our environments for vulnerability and communicate the associated risk to internal and external stakeholders.  
 
Manage and enhance application security tools (Static Code Analysis, Open Source vulnerabilities tools, Dynamic Application Security tools, etc), integrations, and develop in-house application security automation tools
Validate discovered vulnerabilities using code review skills and manual/semi-automatic tooling like Burp.
Validate external penetration test results and work with internal and external stakeholders.
Perform some security penetration tests (both application and infrastructure for Web and mobile applications)
Work with the engineering and security teams to provide actionable reporting, find and explain security issues, suggest mitigations, and determine when issues are mitigated.
Stay up to date on the latest testing tools and techniques ensuring both your and the team is using the most effective and efficient methods.
Produce both high level and detailed reports and metrics to support data-based decisions.
Assist in creating and updating Application Security procedures, policy, standards and guidelines
Train, coach and mentor other members of the team, development and the broader Security and Engineering teams.
 
As leaders in enterprise customer conversations, we celebrate diversity, empowering our team to forge impactful conversations globally. is a place where uniqueness is embraced, growth is constant, and everyone is empowered to create their own success. And, we're very proud to have earned recognition from Fast Company, Newsweek, and BuiltIn for being a top innovative, beloved, and remote-friendly workplace. 
We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants with criminal histories, consistent with applicable federal, state, and local law.
We are committed to the accessibility needs of applicants and employees. We provide reasonable accommodations to job applicants with physical or mental disabilities. Applicants with a disability who require reasonable accommodation for any part of the application or hiring process should inform their recruiting contact upon initial connection.
 
The talent acquisition team at has recently been notified of a phishing scam targeting candidates applying for our open roles. Scammers have been posing as hiring managers and recruiters in an effort to access candidates' personal and financial information.  This phishing scam is not isolated to only and has been documented in news articles and media outlets.Please note that any communication from our hiring teams at regarding a job opportunity will only be made by a employee with an @ .com email address.
does not ask for personal or financial information as part of our interview process, including but not limited to your social security number, online account passwords, credit card numbers, passport information and other related banking information. If you have any questions and or concerns, please feel free to contact  recruiting-lp@.com