Arcadia

Due to Covid–19 we are working 100% remotely, this includes the hiring process. When it is safe to do so, we will return to a hybrid of onsite and remote work for some positions.Why This Role Is Important To Arcadia Arcadia is looking for an Offensive Security Engineer to report directly to our VP of Security, Privacy &amp; Compliance.  In this multi-faceted role, you will be an integral part of our Security team, responsible for designing, conducting and reporting on penetration tests against components of our SaaS web application. You will also work with software developers to ensure secure coding and assist with the remediation of any vulnerabilities identified. The Offensive Security Engineer will work as a member for the Information Security team focused on ensuring the security of Arcadia’s Population Health Analytics portfolio through application security testing, code review, and risk/impact analysis of proposed changes and features. This role will partner with both engineering and product to ensure that security requirements are consistently considered and addressed throughout the development and operational lifecycle including ownership of the SDLC Security plan, code review and remediation, pre-production and ongoing application security testing, vulnerability tracking and remediation.The right Offensive Security Engineer can work independently and follow up with various lines of business as needed to ensure timely testing of the application and closure of any findings.  We are looking for someone who is passionate about finding and fixing application vulnerabilities and will be hyper-vigilant in ensuring that all facets of our SaaS web application is secure against attackers.What Success Looks LikeIn 3 months- Plan and execute penetration tests against web applications and infrastructure; produce reports for stakeholders.- Ensure the implementation of HITRUST controls related to Secure Application Development.- Participate in Information Security &amp; Privacy Steering Committee Meetings.- Conduct code reviews. In 6 months- Track remediation efforts for discovered vulnerabilities and ensure they are patched according to the timeframes specified.- Work with Product and Engineering teams to review new features from a security perspective, perform threat modeling, and conduct code reviews. In 12 months- Participate in building and maturing security capabilities and operations.- Ensure that new product releases are continuously being tested prior to being put into production.
<h3>What Will You Be Doing</h3>
<ul>
<li>Defining, maintaining, and implementing application security best practices to meet HITRUST requirements.</li><li>Owning Security SDLC plan and processes ensuring relevant tasks are completed and required artifacts are created and maintained.</li><li>Providing guidance to Engineering teams during design reviews including threat modeling.</li><li>Integrating security best practices and tooling into our CI/CD processes.</li><li>Evaluating the impact to the organization of current security advisories, publications, and trends.</li><li>Working with Security team and Product stakeholders to build a penetration testing schedule for all products and infrastructure.</li><li>Performing penetration tests and review web applications, source code, operating systems, and network security architectures; find vulnerabilities and define effective strategies for remediation and hardening.</li><li>Performing Red/Purple Team exercises to identify strengths and gaps in defensive tools and processes.</li><li>Explaining and demonstrating vulnerabilities to product stakeholders, provide remediation steps, and design solution prototypes and/or implement security enhancements.</li><li>Tracking and driving remediation efforts for discovered vulnerabilities in web applications and network ensuring they are patched according to the timeframes specified by policy.</li><li>Participating in building and maturing security capabilities and operations.</li><li>Ensuring that the Security Impact Analysis is completed for web/code changes as part of Change Management process.</li><li>Ensuring that all changes are properly tested in a separate test environment prior to being put into production.</li><li>Participating as a key member of Incident Response team as web application and network security SME focused on determining impact, root cause, and resolution associated.</li><li>Identifying, vetting, and coordinating third party vendors in meeting third-party application security testing requirements.</li></ul>
<h3>What You'll Bring</h3>
<ul>
<li>A passion for Application and Network Security with an attacker mindset.</li><li>3+ years of proven code review and penetration testing experience in both web applications and infrastructure; finding vulnerabilities and defining effective strategies for remediation and hardening.</li><li>Experience testing and securing infrastructure on cloud providers such as AWS/Azure.</li><li>Knowledge of the Secure SDLC.</li><li>A firm understanding of OWASP Top 10.</li><li>Experience with static and dynamic code analysis.</li><li>Strong scripting and development skills in languages such as Java, JavaScript, Ruby, Python.</li><li>Security certifications such as OSCP, OSCE, PNPT, EWPT, ECPTX.</li><li>Ability to write formal assessment reports and to explain vulnerabilities to different stakeholders.</li><li>Knowledge and understanding of attack surfaces and the ability to carry out APT style tactics, techniques, and procedures on enterprise systems and services.</li></ul>
<h3>Would Love For You To Have</h3>
<ul>
<li>Experience threat modeling SaaS products, cloud infrastructure, RESTful microservices, etc</li><li>Applied security research, cryptography, reverse engineering, and fuzzing experience.</li><li>Additional certifications such as OSWE, GPEN, GXPN, or CREST will be very desirable.</li><li>Experience in Vulnerability management within containerized environments</li><li>Strong IaaS security skills, with a focus on AWS</li><li>Understanding of Microsoft Windows Server/AD deployments</li><li>Experience conducting Red Team and Purple Team operations</li></ul>
<h3>What You'll Get</h3>
<ul>
<li>You will work with a team of experts in building and maintaining a highly validated security and privacy program for the leader in Population Health and Healthcare data analytics including experience with certifications such as HITRUST, ISO 27001, and SOC 2.</li><li>Be a part of a team and organization that has built security and privacy into the fabric and culture of the organization.</li><li>You will learn how to build and maintain a fully validated and industry leading security program.</li><li>Your responsibilities will grow with you as a critical member of our team.</li><li>Be a part of a mission driven company that is transforming the healthcare industry by changing the way patients receive care</li><li>A flexible, remote friendly company with personality and heart</li><li>Employee driven programs and initiatives for personal and professional development</li><li>Be a member of the Arcadian and Barkadian Community</li></ul>About Arcadia<a href="http://arcadia.io/" rel="noopener noreferrer nofollow ugc" target="_blank">Arcadia.io</a> helps innovative healthcare systems and health plans around the country transform healthcare to reduce cost while improving patient health.   We do this by aggregating massive amounts of clinical and claims data, applying algorithms to identify opportunities to provide better patient care, and making those opportunities actionable by physicians at the point of care in near-real time.  We are passionate about helping our customers drive meaningful outcomes. We are growing fast and have emerged as the market leader in the highly competitive population health management software and value-based care services markets, and we have been recognized by industry analysts KLAS, IDC, Forrester and Chilmark for our leadership. For a better sense of our brand and products, please explore our <a href="https://www.arcadia.io/about-arcadia/leadership/" rel="noopener noreferrer nofollow ugc" target="_blank">website</a>, our <a href="https://www.arcadia.io/resources/" rel="noopener noreferrer nofollow ugc" target="_blank">online resources</a>, and our interactive <a href="https://datagallery.arcadiasolutions.com/static/index.html" rel="noopener noreferrer nofollow ugc" target="_blank">Data Gallery</a>.This position is responsible for following all Security policies and procedures in order to protect all PHI under Arcadia's custodianship as well as Arcadia Intellectual Properties.  For any security-specific roles, the responsibilities would be further defined by the hiring manager.

Boston

Pittsburgh

Offensive Security Engineer

Veeva Systems

Veeva [NYSE: VEEV] is the leader in cloud-based software for the global life sciences industry. Committed to innovation, product excellence, and customer success, our customers range from the world’s largest pharmaceutical companies to emerging biotechs. Veeva’s software helps our customers bring medicines and therapies to patients faster.We are the first public company to become a <a href="https://www.veeva.com/pbc/" rel="noopener noreferrer nofollow ugc" target="_blank">Public Benefit Corporation</a>. As a PBC, we are committed to making the industries we serve more productive, and we are committed to creating high-quality employment opportunities.Veeva is a <a href="https://www.veeva.com/work-anywhere/" rel="noopener noreferrer nofollow ugc" target="_blank">Work Anywhere</a> company which means that you can choose to work in the environment that works best for you - on any given day. Whether you choose to work remotely from home or work in an office - it’s up to you.The RoleVeeva’s Security Engineering Team is seeking Red Teamers to help keep Veeva secure and safe from attackers. Our team in Columbus is growing, and we want you to join us! This role has a broad scope, ranging from attacking Veeva’s AWS services, infrastructure and processes, and products. Discovering weaknesses in Veeva’s architecture. Working with product and platform teams performing penetration tests on new products. Working with third-party testers and researchers to sharpen our detective and preventative capabilities. This role presents an ultimate test of one’s security knowledge and ability, along with the support of a team of highly skilled individuals.
<h3>What You'll Do </h3>
<ul>
<li>A Red Team Security Engineer at Veeva is expected to be strong in offensive security domains, testing, techniques, and practices.  Engineers in this role work closely with application product teams throughout Veeva. Security engineers will provide technical leadership and advice to developers, engineers, and third-party consultants.</li><li>As a Red Team Engineer, you must show exemplary judgment in making informed technical trade-offs of testing, short-term fixes, long-term security gains, and product team development. You must also demonstrate resilience and navigate difficult situations with composure and tact. Above all else, a strong sense of customer obsession is necessary to focus on the ultimate goal of keeping Veeva and its customers secure.</li><li>Participate in Red Team engagements throughout Veeva with few limits and restrictions</li><li>Conduct full-cycle engagements with development teams independently, or as part of a team</li><li>Perform manual examination of Veeva systems, websites, and networks to discover weaknesses</li><li>Thoroughly document exploits, attack chains, and proof of concept scenarios for technical reviews</li><li>Communicate findings and discoveries to prioritize and execute remediation plans</li><li>Coordinate findings and remediation from third-party penetration testers</li><li>Maintain AWS VPC and related testing systems for our internal and third-party testing programs</li><li>Conduct red team, and purple team exercises and coordinate tabletop exercises</li><li>Penetration tests of new products, concepts, and pilot products</li><li>Review Veeva product release notes and select new features to test throughout the year</li></ul>
<h3>Requirements </h3>
<ul>
<li>BS in Computer Science or related field, or equivalent work experience</li><li>2+ years in an Information Security role, preferably in red teaming, offensive security, penetration testing, reverse engineering, incident response, or vulnerability management</li><li>Advanced knowledge and understanding in various disciplines such as security engineering, system and network security, authentication and security protocols, cryptography, and application security</li><li>Experience with interpreted or compiled languages: Python, Ruby, Perl, PHP, C/C++, Java, C#</li><li>Experience with cloud service providers and their offerings, preferably AWS and its various technologies and APIs</li><li>Mobile testing on Windows, iOS, and Android</li><li>Experience with various testing tools, such as Netspaker, Kali Linux, Metasploit, Nmap, Nessus, Burp Suite, etc.</li><li>Familiar with offensive TTPs (Tactics, Techniques, and Procedures) including post-exploitation and lateral movement</li><li>Experience with Redhat, AWS Linux, AWS Linux 2, Windows Server 2012, 2016 and 2019</li><li>Understanding of one or more standards: OSWAP Top 10, SANS Top 20, NIST 800-53, CIS, CSC, or other security standards</li></ul>
<h3>Nice to Have </h3>
<ul>
<li>Industry penetration certifications such as OSCP, GPEN, GXPN, GWAPT, etc.</li><li>Industry security certifications such as CISSP, CEH, or others</li><li>Experience in conducting social engineering-focused assessments</li><li>Experience in CTF competitions, CVE research, and/or Bug Bounty recognition</li><li>Knowledge of the MITRE ATT&amp;CK Framework</li><li>Experience in Web and Mobile (Android/iOS) based application/service assessment</li><li>Experience in Wireless and Network assessment in enterprise infrastructure</li><li>Experience in reverse engineering and associated tooling such as IDA</li><li>Experience in Advanced Persistent Threat exploits</li><li>Experience with Web Application Firewalls (WAF), IDS/IPS, or other security platforms</li><li>Knowledge of fuzzing, memory corruption, and exploit development</li><li>Knowledge about hardware hacking</li></ul>#LI-RemoteUS#BI-RemoteVeeva’s headquarters is located in the San Francisco Bay Area with offices in more than 15 countries around the world.   Veeva is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin or ancestry, age, disability, marital status, pregnancy, protected veteran status, protected genetic information, political affiliation, or any other characteristics protected by local laws, regulations, or ordinances. If you need assistance or accommodation due to a disability or special need when applying for a role or in our recruitment process, please contact us at talent_accommodations@veeva.com.

New York

Security Engineer - Red Team Penetration Testing

Ledger

We're making the world of digital assets accessible and secure for everyone. Join the mission !Founded in 2014, Ledger is the global platform for digital assets and Web3. Over 15% of the world’s crypto assets are secured through our Ledger Nanos. Headquartered in Paris and Vierzon, with offices in the UK, US, Switzerland and Singapore, Ledger has a team of more than 700 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow and manage crypto assets – including the Ledger hardware wallets line with more than 5 millions units already sold in 180 countries.  At Ledger, we embody the values that make us unique: Pragmatism, Audacity, Commitment, Trust and Transparency. Have a look at our Origins video <a href="https://www.youtube.com/watch?v=Etqa_ECbz3M" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>. To sustain our growth, you will take a role in the continued innovation of Ledgers Cyber Security strategy by driving the implementation, configuration and maintenance of a variety of Security toolsets across different environments. As a member of the Cyber Security team, you will be monitoring, detecting and responding to security alerts, working closely with all other tech teams. Autonomous and creative, you’ll join a small team and take ownership of a wide variety of toolsets. This will be a challenging and rewarding position and a technically "hands-on" role. Previous experience in a similar roles is a Must.Your responsibilities :- Provide technical deep understanding of security systems at different layers.- Instill a culture that works toward the highest standards in security engineering while ensuring that business requirements are understood and adhered to and security risks in new and existing infrastructure are properly understood and mitigated.- Provide direction in the innovation of bleeding-edge security technologies and utilizing a risk-based approach to properly test and introduce them into the overall environment.- Be passionate in the pursuit of securing Ledger’s data and critical assets.- Collaborate with colleagues in other teams to enable the correct testing, deployment and configuration of security technologies as well as managing their ongoing maintenance, update and fine-tuning in response to feedback from Operational Monitoring teams who will rely on these toolsets.Your missions :- Select, design, implement, maintain and fine-tune security solutions, such as VAS, SIEM, EDR, IAM, WAF and ad-hoc tools, to protect critical information assets, meet the business and security requirements and strategy.- Develop automation for security tools management and workflow integration.- Mitigate attacks in collaboration with the other related teams and security experts.- Build and feed relevant KPIs, SLAs and reporting to meet business objectives.- Provide technological expertise, guidance, recommendation and standards on network, cloud or endpoint security configuration and tooling, processes and practices.- Respond to and assist with due diligence and internal / external security audit requests.Technical skills : (all the listed below are mandatory unless otherwise)- In-depth and hands-on expertise in deploying, configuring and maintaining at least two (preferably more) security solutions such as: IAM/SSO (mandatory ; ex: Okta, OneLogin), VAS (ex: Qualys), SIEM (ex: ELK, Splunk), EDR (ex: SentinelOne, CarbonBlack), WAF (ex: Cloudflare), DLP, FW, IDS.- Knowledge in system and network admin (Linux, Windows, TCP/IP…) and AWS.- Knowledge in DB admin and security (PostGreSQL, MySQL, NoSQL).Knowledge in Web application security (OWASP).- Expertise in scripting languages (Python, Shell), automation tools (Terraform, Ansible) and RegExp.- Knowledge of SSDLC processes (Git, CI/CD…).Knowledge in at least one (preferably more) standards  (ISO 27001, SOC2 and GDPR.- Developer and/or pentesting skills would be a good differentiator.Background and profile :- Bachelor’s degree in engineering, computer science, information security, or information systems or equivalent experience in relevant fields.- In-depth experience (min. 4 years) in the field of Information Security / Cyber Security, with hands-on expertise in technical toolsets and experience in incident response and mitigation.- Ability to handle multiple competing priorities in a fast-paced environment.- Experience on leading complex projects cross-functionally and globally desirable.- Excellent communication skills and excellent team player.- Relevant certification is a plus (ex: CISSP, OSCP, SANS GPEN / GXPN / GIAC / GREM or product-oriented, such as Splunk or AWS).What’s in it for you ?Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow. Flexibility: A hybrid work policy.Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks.Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage. Well-being: Personal development, coaching &amp; fitness with our dedicated partners.Vacation: Five weeks of paid leave per year, in addition to national holidays and rest &amp; relaxation (RTT) days.High tech: Access to high performance office equipment and gadgets, including Apple products. Transport: Ledger reimburses part of your preferred means of transportation. Discounts: Employee discount on all our products.We are an equal opportunity employer for all without any distinction of gender, ethnicity, religion, sexual orientation, social status, disability or age.

Paris

IT Cyber Security Engineer

XOR Security

<p><strong>XOR Security</strong> is currently seeking a talented and ambitious self-starting<strong> Security Operations Center (SOC) Manager/Team Lead</strong> with advanced skillsets in cyber security with emphasis on applied cloud security to develop operational strategy in the effort to continually move forward the skills and capabilities of our dynamic team of security analysts for a variety of federal customers. </p>
<p>This is a unique opportunity for the right candidate to embed themselves into the next generation of operational environments which is now taking place across the US government. The existing team is a multi-faceted interdisciplinary set of experts with ever-increasing prowess in this unique environment. Our security operations project is aimed at establishing innovative techniques for a comprehensive, cloud-first network enclave defense, identifying the emerging threats, and detecting malicious activity using advanced toolsets provided in the Microsoft cloud security ecosystem.  </p>
<p>The ideal candidate will have hands-on experience as a SOC analyst performing Incident Response and Intrusion Detection on an operational Federal network, ideally having been migrated to a cloud environment, specifically, the Microsoft Sentinel SIEM and related security portals in Azure. Candidates should have excellent written and oral communication skills, be able to work independently and as part of a team, with demonstrated leadership capabilities.  Skills and experience in Operations Management, Security Event Analysis, Incident Response, Cyber Hunt, Forensics, Malware Analysis, and Cyber Threat Intelligence (skills in more than one cyber discipline are preferred) are required for this position.  The ideal candidate will have hands-on experience supporting a 24x7x365 SOC environment as an analyst or engineer, experience as a technical team lead within the SOC, and operations management experience.  A solid understanding of cyber threats and information security in the domains of TTP’s, Threat Actors, Campaigns, and Observables. Additionally, the ideal candidate would be familiar with intrusion detection systems, intrusion analysis, security information event management platforms, endpoint threat detection tools, and security operations ticket management. </p>
<p>Corporate duties such as solution/proposal development, corporate culture development, mentoring employees, supporting recruiting efforts, will also be required.  In addition, flexibility in work locations within the DC Metro Area and performing varying duties is a must.</p>
<p><strong>Job duties include:</strong></p>
<ul>
<li>Manage a SOC to provide cyber defense capabilities to a federal entity in a  comprehensive Computer Network Defense support service through security event monitoring, advanced analytics and response, and cyber intelligence activities.</li>
<li>Conduct quality assurance reviews of all SOC activities through reviewing of metrics and case analysis while reporting to the Program Manager</li>
<li>Serve as a technical Cyber SME and onsite Task Lead</li>
<li>Maintain a 24x7 schedule and minimum-manning requirements</li>
<li>Lead efforts Planning, organization, scheduling and progress reporting of various projects</li>
<li>Construct and optimize operational workflows for 24x7 teams across multiple shifts</li>
<li>Develop, collect, analyze security operational metrics to optimize SOC performance and minimize organizational risk</li>
<li>Research, evaluate, recommend, and design new security technologies and supporting infrastructure</li>
<li>Develop technical cyber security solutions in response to customer requests or in support of proposal solution development</li>
<li>Provide technical writing support in support of corporate response to RFPs/RFQs from various customers</li>
<li>Support new XOR engagements as transitional program or operations lead</li>
<li>Support documentation of all business and workflow processes in this area</li>
<li>Provides technical consultation in cyber security capability development</li>
<li>Maintains current knowledge of relevant cyber security and related technologies as assigned</li>
<li>Serves as liaison with various customers (internal and external)</li>
<li>Acts as a subject-matter expert to multiple tasks and/or programs</li>
</ul>
<p><strong>Candidate must have the required Qualifications:</strong></p>
<ul>
<li>At least 3 years of experience in a cyber network defense environment performing analysis and engineer functions and 2 years of experience as a team lead or operations management</li>
<li>Work independently to design cloud security operations strategy and report progress</li>
<li>An industry technical certification such as GCIH, MS-SC200 or other MS cloud certifications</li>
<li>Experience with MS tools such as Active Directory, Azure Active Directory, AD Connect, SAML, Kerberos, Cisco IOS, MS Server, Azure cloud environments, Incident Handling, Threat hunting experience, fundamental knowledge of IEEE 7 layers </li>
<li>Experience with deployment and documentation of enterprise project management and change management processes </li>
<li>Ability to identify solutions to potential network/data/asset issues/embrace network simplification and apply strengthened security methods</li>
<li>Ability to conduct event triage and analysis and incident investigation </li>
<li>Write threat reports and incident reports </li>
<li>Read and ingest various govt. regulations for application to agency environment </li>
</ul>
<p><strong>Desired Qualifications:</strong></p>
<ul>
<li>Experience in mentoring and training junior, mid-level, and senior analysts.</li>
<li>Proficiency in utilizing various packet capture (PCAP) applications/engines and in the analysis of PCAP data.</li>
<li>Ability to develop rules, filters, views, signatures, countermeasures and operationally relevant applications and scripts to support analysis and detection efforts.</li>
<li>One or more certifications for CND Analysts: GCIA, GCFA, GCFE, GREM, GISF, GMON, GXPN, CHFI, GNFA, CCFP, LPT, CHFI, CSA.</li>
<li>One or more certifications for a manager: CISSP, PMP, CISM, ITILv3</li>
</ul>
<p><strong>Closing Statement:</strong></p>
<p><strong>XOR Security</strong> offers a very competitive benefits package including health insurance coverage from first day of employment, 401k with a vested company match, vacation, and supplemental insurance benefits.</p>
<p><strong>XOR Security</strong> is an Equal Opportunity Employer (EOE). M/F/D/V.</p>
<p><strong>Citizenship Clearance Requirement</strong>Applicants selected may be subject to a government security investigation and must meet eligibility requirements – US CITIZENSHIP REQUIRED.</p>

Washington

Security Operations Center (SOC) Manager/Team Lead

Ninja Van

Ninja Van is a late-stage logtech startup that is disrupting a massive industry with innovation and cutting edge technology. Launched 2014 in Singapore, we have grown rapidly to become one of Southeast Asia's largest and fastest-growing express logistics companies. Since our inception, we’ve delivered to 100 million different customers across the region with added predictability, flexibility and convenience. Join us in our mission to connect shippers and shoppers across Southeast Asia to a world of new possibilities. More about us: - We process 250 million API requests and 3TB of data every day.- We deliver more than 1.5 million parcels every day.- 100% network coverage with 1000+ hubs and stations in 6 SEA markets (Singapore, Malaysia, Indonesia, Thailand, Vietnam and Philippines), reaching 500 million consumers.- 600,000 active shippers in all e-commerce segments, from the largest marketplaces to the individual social commerce sellers.- Raised more than US$500 million over five rounds.We are looking for world-class talent to join our crack team of engineers, product managers and designers. We want people who are passionate about creating software that makes a difference to the world. We like people who are brimming with ideas and who take initiative rather than wait to be told what to do. We prize team-first mentality, personal responsibility and tenacity to solve hard problems and meet deadlines. As part of a small and lean team, you will have a very direct impact on the success of the company. You need to have knowledge in securing inhouse developed products by performing Web Application, Mobile and API security testing with knowledge of OWASP Top 10 vulnerabilities.As a team member, you will work with engineering teams to build secure products. Being part of our team, you will manage a portfolio of Web Application’s, Mobile Application Security and API’s Security. There would also be knowledge sharing sessions by attending various security conferences, trainings and internal hackathons.
<h3>Role and Responsibilities </h3>
<ul>
<li> Work individually or as a part of team conducting manual code reviews, static vulnerability scanning, vulnerability validations and false positive analysis                                                                         </li><li> Enhance existing application security tools and introduce new tools where applicable                                                                                 </li><li> Perform Application Security assessment and sometimes manual code reviews of web applications, web services, mobile, front-end &amp; back-end services                     </li><li>Work closely with software engineers from the various development teams to build a secure architecture and coding standard across the organization                             </li><li>Communicate technical and business risk of the vulnerabilities discovered including remediation recommendations      </li><li>Work with internal teams to support them in remediation efforts</li><li>Keep abreast with latest technology risks and utilize them in work                                                                            </li><li>Contribute to the information security strategy and rollout of the strategy</li></ul>
<h3>Requirements</h3>
<ul>
<li>Degree in Computer Science and Engineering </li><li>Experience in Application Security and Code Reviews with sufficient security background (5+ years in Security and 2+ years in software development)</li><li>Experience with penetration testing tools and tool suites such as Burp Suite Pro, OWASP Zap, Postman, Kali Linux, SQLMap, Nessus, etc.</li><li>Experience in web application security, mobile security, API security with knowledge of application vulnerabilities and business logic flaws and threats</li><li>Programming language skills such as Java, ReactJs,NodeJs Javascript (nice to have).</li><li>Experience in security risk assessment and threat modeling of applications</li><li>Familiarity with Google, Kubernetes, Docker, and Terraform</li><li>Excellent language skills and ability communicate complex vulnerabilities to internal teams</li><li>Well versed with OWASP Code Review Guide</li><li>Ability to triage results from automated code scanning tools for false positives and false negatives</li><li>Certifications such as GPEN, GXPN, GMOB, GWAPT, OSWE, OSCP, OSCE, OSWP,CNCF, AWS (Preferred) </li></ul>Submit a job applicationBy applying to the job, you acknowledge that you have read, understood and agreed to our Privacy Policy Notice (the “Notice”) and consent to the collection, use and/or disclosure of your personal data by Ninja Logistics Pte Ltd (the “Company”) for the purposes set out in the Notice. In the event that your job application or personal data was received from any third party pursuant to the purposes set out in the Notice, you warrant that such third party has been duly authorised by you to disclose your personal data to us for the purposes set out in the the Notice.

Singapore

Application Security Analyst

Apply to GXPN Cyber Security Jobs in companies remotely and near you. New GXPN Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Offensive Security Engineer at Arcadia	Remote Full Time Red Team Manager Incident Response
Security Engineer - Red Team Penetration Testing at Veeva Systems	Android Application Security AWS Burp Suite C
IT Cyber Security Engineer at Ledger	Ansible Application Security Automation AWS Cissp
Security Operations Center (SOC) Manager/Team Lead at XOR Security	Active Directory Analytics Azure CISM Cissp
Application Security Analyst at Ninja Van	Application Security AWS Burp Suite Docker GPEN

GXPN Cyber Security Jobs

0 GXPN Cyber Security Jobs. Page 1 of 1

5 closed gxpn cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

GXPN Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

GXPN Cyber Security Jobs

0 GXPN Cyber Security Jobs. Page 1 of 1

5 closed gxpn cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

GXPN Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter