Security Engineer (Application Security)

Acceldata is hiring a Security Engineer focused on SOC operations and penetration testing. You will own the security of the Acceldata platform end-to-end: finding, classifying and fixing vulnerabilities. You will work closely with Product, Sales and Engineering to build and ship secure software.

What You’ll Do

• You will be part of a security team that spans proactive testing and reactive response, and you will need a working knowledge of SOC (Security Operations Centre) operations, real-time threat monitoring and response and how they complement proactive security efforts.
• Run periodic penetration tests and white-box assessments to verify that security requirements have been met. Where possible, test before a product ramps.
• Own end-to-end CVE management, including triage and impact analysis (confidentiality, integrity, availability). Ensure open-source dependency vulnerabilities are remediated and that monthly and quarterly patch releases carry the latest security fixes.
• Partner across cross-functional teams to integrate thorough security and risk questionnaire evaluations into the sales/vendor review lifecycle.
• Coordinate regular third-party application security assessments on Acceldata products. Make sure bugs are filed, fixed, and the results actioned.
• Perform threat modelling and design reviews for products and features.
• Build security automation for continuous validation, SAST and DAST.
• Act as first responder for customer-facing security questions on CVEs, bug triage and incident management.
• Partner with Product, Engineering and other teams, internal and external, to deliver secure software.

What You’ll Bring

• Hands-on, production experience in penetration testing, white-box testing, application security and vulnerability management
• Strong command of the OWASP Top 10, and experience finding these issues in real applications
• Experience fixing security issues in Java code and Experience with API security testing
• Hands-on experience with AppScan, Fortify and Checkmarx (SAST/DAST tooling)
• Experience delivering secure code training to developers and bug bounty programs
• Strong communication skills and a collaborative approach with the engineering team