Security Engineer (Application Security)

Acceldata is hiring a Security Engineer focused on SOC operations and penetration testing. You will own the security of the Acceldata platform end-to-end: finding, classifying and fixing vulnerabilities. You will work closely with Product, Sales and Engineering to build and ship secure software.

Responsibilities

You will be part of a security team that spans proactive testing and reactive response, and you will need a working knowledge of SOC (Security Operations Centre) operations, real-time threat monitoring and response and how they complement proactive security efforts.; Run periodic penetration tests and white-box assessments to verify that security requirements have been met. Where possible, test before a product ramps.; Own end-to-end CVE management, including triage and impact analysis (confidentiality, integrity, availability). Ensure open-source dependency vulnerabilities are remediated and that monthly and quarterly patch releases carry the latest security fixes.; Partner across cross-functional teams to integrate thorough security and risk questionnaire evaluations into the sales/vendor review lifecycle.; Coordinate regular third-party application security assessments on Acceldata products. Make sure bugs are filed, fixed, and the results actioned.; Perform threat modelling and design reviews for products and features.; Build security automation for continuous validation, SAST and DAST.; Act as first responder for customer-facing security questions on CVEs, bug triage and incident management.; Partner with Product, Engineering and other teams, internal and external, to deliver secure software.

Requirements

Hands-on, production experience in penetration testing, white-box testing, application security and vulnerability management; Strong command of the OWASP Top 10, and experience finding these issues in real applications; Experience fixing security issues in Java code and Experience with API security testing; Hands-on experience with AppScan, Fortify and Checkmarx (SAST/DAST tooling); Experience delivering secure code training to developers and bug bounty programs; Strong communication skills and a collaborative approach with the engineering team