Security Engineer (Application Security)

Acceldata is hiring a Security Engineer focused on SOC operations and penetration testing. You will own the security of the Acceldata platform end-to-end: finding, classifying and fixing vulnerabilities. You will work closely with Product, Sales and Engineering to build and ship secure software.

What You’ll Do

You will be part of a security team that spans proactive testing and reactive response, and you will need a working knowledge of SOC (Security Operations Centre) operations, real-time threat monitoring and response and how they complement proactive security efforts.
Run periodic penetration tests and white-box assessments to verify that security requirements have been met. Where possible, test before a product ramps.
Own end-to-end CVE management, including triage and impact analysis (confidentiality, integrity, availability). Ensure open-source dependency vulnerabilities are remediated and that monthly and quarterly patch releases carry the latest security fixes.
Partner across cross-functional teams to integrate thorough security and risk questionnaire evaluations into the sales/vendor review lifecycle.
Coordinate regular third-party application security assessments on Acceldata products. Make sure bugs are filed, fixed, and the results actioned.
Perform threat modelling and design reviews for products and features.
Build security automation for continuous validation, SAST and DAST.
Act as first responder for customer-facing security questions on CVEs, bug triage and incident management.
Partner with Product, Engineering and other teams, internal and external, to deliver secure software.

What You’ll Bring

• Hands-on, production experience in penetration testing, white-box testing, application security and vulnerability management
• Strong command of the OWASP Top 10, and experience finding these issues in real applications
• Experience fixing security issues in Java code and Experience with API security testing
• Hands-on experience with AppScan, Fortify and Checkmarx (SAST/DAST tooling)
• Experience delivering secure code training to developers and bug bounty programs
• Strong communication skills and a collaborative approach with the engineering team