Software Security Engineer
Job Description
Position Summary
As part of the Software Security team, we are looking for a person who will work on setting up tools for Software Security Scanning and working with other application teams and guide them and help them with the implementation best security practices and Mitigation of their security issues.
Experience and Required Skill Sets
- Develop security strategies and guidance documentation that drives the strategy
- Continuously improve the processes and procedures to include report exceptions/ risk acceptance for further review
- Lead vulnerability assessments and monitoring services across several applications
- Knowledge of at least one of these security software –Black duck/Twist lock/Coverity
- Knowledge of implementing Software Scanning in pipeline
- Resolve technical issues escalated from app team
- Contribute to the development of security policies and security standards
- Proficient in Java with 2-3 years of experience
- 4+ yrs experience in DevSecOps and Software Security
- Knowledge of Java based build tools –Maven, Gradle
- Familiar with DevOps Tools/pipeline is plus – Jfrog Artifactory, Jenkins
- Strong presentation, speaking, collaboration, and writing skills
- Basic cloud proficiency with GCP, AWS, or Azure
#Education
- Bachelor's degree or equivalent
- Strong written and verbal communication skills