Product Security Engineer | HM: Joe Dubail | Team: InfoSec IRC287719

職種概要

AuditBoard is looking for a passionate and experienced Sr. Application Security/Product Security Engineer, who will work along product and engineering teams to develop secure and resilient software used by some of the most security conscious customers on the planet. Supported by the InfoSec team, this position will serve as a Security liaison to the AuditBoard engineering team – assisting them with implementing security best practice at every layer of the SDLC, primarily focusing on threat modeling, secure design review, and triage and prioritization of application security vulnerabilities identified by the infosec team. This role will also be instrumental in the continued development of secure SDLC practices at AuditBoard.

必要条件

• Requirements5+ years of experience developing or securing web-based applications
• Experience with modern Javascript (Node.JS, ES6 and TypeScript) and front-end frameworks (Ember, Angular, React, Vue, etc.)
• Experience with leading threat modeling and secure design reviews
• Experience with security assessment tools (SCA, SAST, DAST) such as Qualys, SonarCloud, Prisma or similar is a plus.Docker & Kubernetes
• Excellent organization, time management, and attention to detailMust be action-oriented and have a proactive and collaborative approach to solving issues
• Participates in the design review process, seeking and providing constructive criticismProvides significant input into system architecture, considers scalability and performance
• Communicates technical decisions through design docs, tech talks, and the wikiProvides mentorship and technical guidance to junior and mid-level engineers
• Ability to work within an on-call shift rotationPreferredExperience working on SaaS web applications
• Experience with building and maintaining internal tooling and orchestration using Python and other scripting languages
• Experience with building and securing CICD pipelines and incorporating supply chain security best practices.
• Experience with implementing static code analysis, Web Application Firewalls (WAF), or other software security solutions
• Experience coordinating bug bounty and penetration testing engagements
• Leveraging, building and securing AI coding assistants, agents, and product solutions
• BS in Computer Science (or equivalent experience)

職務内容

• Working with product and engineering teams to implement security throughout the design and development process.
• Working with JavaScript, Node.JS, Ember, Python, GoLang, Docker, PostgreSQL, and Kubernetes.
• Creating application threat models, performing secure code reviews, and ensuring the use of secure coding practices, with the support of the Infosec team.
• Assisting the infosec team in driving adoption of Secure SDLC solutions and practices, such as SAST, DAST, SCA, IAST, App Runtime.
• Providing subject matter expertise and training on encryption, authentication, key security controls, and secure programming practices.
• Validating, triaging and driving the remediation of vulnerabilities discovered through internal testing, third-party penetration tests, or bug bounty programs.
• Guiding the implementation, configuration and operation of application layer security controls such as Web Application Firewall and DDoS mitigation solutions.
• Assisting with Security Compliance activities as required.Assisting with investigation and response to security incidents and web application attacks as necessary.

私たちが提供するもの

Culture of caring. At GlobalLogic, we prioritize a culture of caring. Across every region and department, at every level, we consistently put people first. From day one, you’ll experience an inclusive culture of acceptance and belonging, where you’ll have the chance to build meaningful connections with collaborative teammates, supportive managers, and compassionate leaders. 

Learning and development. We are committed to your continuous learning and development. You’ll learn and grow daily in an environment with many opportunities to try new things, sharpen your skills, and advance your career at GlobalLogic. With our Career Navigator tool as just one example, GlobalLogic offers a rich array of programs, training curricula, and hands-on opportunities to grow personally and professionally.

Interesting & meaningful work. GlobalLogic is known for engineering impact for and with clients around the world. As part of our team, you’ll have the chance to work on projects that matter. Each is a unique opportunity to engage your curiosity and creative problem-solving skills as you help clients reimagine what’s possible and bring new solutions to market. In the process, you’ll have the privilege of working on some of the most cutting-edge and impactful solutions shaping the world today.

Balance and flexibility. We believe in the importance of balance and flexibility. With many functional career areas, roles, and work arrangements, you can explore ways of achieving the perfect balance between your work and life. Your life extends beyond the office, and we always do our best to help you integrate and balance the best of work and life, having fun along the way!

High-trust organization. We are a high-trust organization where integrity is key. By joining GlobalLogic, you’re placing your trust in a safe, reliable, and ethical global company. Integrity and trust are a cornerstone of our value proposition to our employees and clients. You will find truthfulness, candor, and integrity in everything we do.

GlobalLogicについて

GlobalLogic, a Hitachi Group Company, is a trusted digital engineering partner to the world’s largest and most forward-thinking companies. Since 2000, we’ve been at the forefront of the digital revolution – helping create some of the most innovative and widely used digital products and experiences. Today we continue to collaborate with clients in transforming businesses and redefining industries through intelligent products, platforms, and services.