Job Search
Senior Security Engineer / Test Engineer IRC113956
| Job: | IRC113956 |
| Location: | Ukraine - Entire Ukraine |
| Designation: | Senior Software Engineer |
| Experience: | 5-10 years |
| Function: | Engineering |
| Skills: | AWS, Cryptography, Docker, HTTPS and TLS/SSL, Jenkins, Linux, Network Security, Release Automation, Security |
Description:
We are looking for an experienced Senior AppSec Engineer with both technical and interpersonal skills for our security engineering efforts to contribute to improving the security posture of our infrastructure and applications.
Client – the worldwide manufacturer of smart beds, which increase the overall quality of sleep. The solution senses and automatically adjusts the comfort level:
- Tracking personal sleep data during the night
- Individual comfort and temperature balancing
- Comfort adjustability on each side of the bed
The project is related to developing cutting-edge IoT technology.
Requirements:
• BS or MS in Computer Science or equivalent technical degree
• Minimum of 5 years of relevant experience
• Strong background in application security development, network security, and automation
• Familiar with source code control tools
• Strong background in various forms of application security testing i.e., SAST, DAST, and IAST
• Excellent understanding of malicious exploits i.e., XSS, CSRF, SQL Injection, Code Injection, etc.
• Excellent understanding of AAA (Authentication, Authorization, Auditing)
• Good understanding of known authentication protocols: LDAP, SASL, OAuth, OIDC, Mutual TLS
• Good understanding of known authorization models: ACL, RBAC, ABAC, CBAC, MAC, DAC
• Familiar with SAML, SSO (Single Sign-On), MFA (Multi-Factor Authentication)
• Excellent understanding of PKI (Public Key Infrastructure) and its components: CA, RA, VA, TSA.
• Excellent understanding of TLS/SSL
• Good understanding of cryptography concepts such as digital signature, data integrity, message authentication, confidentiality, non-repudiation
• Excellent understanding of encryption at rest and in-transit
• Good understanding of symmetric and asymmetric cryptography
• Upper-intermediate English
Additional Qualifications:
• Familiar with Runtime Application Self-Protection (RASP)
• Cross-platform/multi-language development experience
• CISSP/HCISSP certification or equivalent experience
• Knowledge and experience in security of large-scale cloud-based applications and environment
Job Responsibilities:
Description:
As a Senior AppSec Engineer, you will be working side-by-side at the code and architecture level with each of our engineering teams to ensure security throughout our operations and technical systems, from infrastructure to the applications. Your primary focus will be application security testing including SAST, DAST, and IAST. You will work with various engineering teams including Mobile, Web, Embedded, QA, Cloud, and Data Platform to improve the security quality of their code.
Responsibilities:
• Integrate application security tastings SAST/DAST/IAST into the DevSecOps pipeline
• Schedule, scope, and prioritize security assessments of applications
• Provide education and guidance about SAST/DAST/IAST tools and process best practices
• Perform on-going security testing and code review to improve software security
• Mentor other team members in security coding methods and best practices
• Continually improve DevSecOps infrastructure, tools, processes, and procedures
• Maintain security technical documentation
What We Offer
Exciting Projects: Come take your place at the forefront of digital transformation! With clients across all industries and sectors, we offer an opportunity to participate in creating market-defining products using the latest technologies.
Collaborative Environment: Expand your skills by collaborating with a diverse team of highly talented people in an open, laidback environment — or even abroad in one of our global centers or client facilities!
Work-Life Balance: GlobalLogic prioritizes work-life balance, which is why we offer flexible opportunities and options.
Professional Development: Our dedicated Learning & Development team regularly organizes certification and technical / soft skill training to help you realize your professional goals.
Excellent Benefits: We provide our consultants with competitive compensation and benefits
Fun Perks: We want you to love where you work, which is why we host sports classes, cultural, social and team building activities such as sports competitions and end-of-year corporate parties. Our vibrant offices also include dedicated GL Zones and rooftop decks where you can drink coffee or tea with your colleagues over a game of table football or darts!
About GlobalLogic
GlobalLogic is a full-lifecycle product development services leader that combines chip-to-cloud software engineering expertise and vertical industry experience to help our customers design, build, and deliver their next-generation products and digital experiences. We expertly integrate design, complex engineering, and agile delivery capabilities to deliver superior business outcomes for global brands in telecom, automotive, healthcare, technology, media and entertainment, manufacturing, and semiconductor industries.
Headquartered in Silicon Valley, GlobalLogic unites over 18,000 designers and engineers across the globe. Analysts like NASSCOM and Zinnov have recognized us for being a top company in our field, and we are consistently nominated as a preferred company by both global HR consulting firms and local boards. By creating an environment that is exciting and flexible, and by fostering growth through ongoing learning and development programs, we empower our consultants to achieve both their professional and personal goals.
At GlobalLogic, we make amazing products — and careers.
