Senior Security Engineer - Contract - Remote

Hi,

Please find the job description below and revert with Updated Resume. Let me know if you have any questions.

Job Title : Senior Security Engineer

Location : Remote (Should work in PST Time-zone)

Duration : Long Term

Job Type : Contract

What You'll Do

Build relationships across all parts of the business and guide multi-functional projects to improve the security and privacy posture environment
Focus on security architecture, design, and engineering subject areas while being able to layout product security maturity, identify program and tool gaps and recommend solutions
You will report to the Director of Engineering and GRC
Lead annual penetration testing along with socializing gap results, and working with partners to fix the gaps within a reasonable timeframe
Working with Engineering, Product, Risk, and customer-facing teams is a core tenant of the role and the team
Implement DAST/SAST/SCA/WAF/RASP/IAST solutions in an enterprise environment
Perform Application threat modeling exercises and attack simulation exercises both in the context of internal assessments
Provide detailed explanations of the security issues found and ensure that those responsible for fixing them have a firm grasp of the fixes that need to be implemented
Implement enhancements to our Continuous Integration and Continuous Deployment (CI/CD) pipeline/s to include security controls and appropriate guardrails to help build secure code and scale security processes
Lead application penetration testing and translate the technical requirements and findings to appropriate partners
Collaborate with team members, understand their processes and workflows, prioritize their ideas and innovations, and develop improvements to ensure successful execution
Provide technical leadership and mentorship on security topics to both security and non-security user groups

What You Know

5 or more years of experience in a relevant role
Experience architecting and operating application security tooling such as DAST/SAST/SCA/WAF/RASP/IAST in an enterprise environment
Experience with socializing and building partnerships on security programs and user expectations
Experience dealing with incident response
Moderate experience conducting web application security reviews, application, and network-based penetration testing, and threat modeling
Moderate to basic experience with common attack scenarios in several common layers within our infrastructure (cloud-based issues, code quality, and insider threat)
Basic programming in the following languages: Python, JS, Go, ROR, or Java
Basic experience working with Cloud hosting platforms (e.g AWS)