Arcadia

Due to Covid–19 we are working 100% remotely, this includes the hiring process. When it is safe to do so, we will return to a hybrid of onsite and remote work for some positions.Why This Role Is Important To Arcadia Arcadia is looking for an Offensive Security Engineer to report directly to our VP of Security, Privacy &amp; Compliance.  In this multi-faceted role, you will be an integral part of our Security team, responsible for designing, conducting and reporting on penetration tests against components of our SaaS web application. You will also work with software developers to ensure secure coding and assist with the remediation of any vulnerabilities identified. The Offensive Security Engineer will work as a member for the Information Security team focused on ensuring the security of Arcadia’s Population Health Analytics portfolio through application security testing, code review, and risk/impact analysis of proposed changes and features. This role will partner with both engineering and product to ensure that security requirements are consistently considered and addressed throughout the development and operational lifecycle including ownership of the SDLC Security plan, code review and remediation, pre-production and ongoing application security testing, vulnerability tracking and remediation.The right Offensive Security Engineer can work independently and follow up with various lines of business as needed to ensure timely testing of the application and closure of any findings.  We are looking for someone who is passionate about finding and fixing application vulnerabilities and will be hyper-vigilant in ensuring that all facets of our SaaS web application is secure against attackers.What Success Looks LikeIn 3 months- Plan and execute penetration tests against web applications and infrastructure; produce reports for stakeholders.- Ensure the implementation of HITRUST controls related to Secure Application Development.- Participate in Information Security &amp; Privacy Steering Committee Meetings.- Conduct code reviews. In 6 months- Track remediation efforts for discovered vulnerabilities and ensure they are patched according to the timeframes specified.- Work with Product and Engineering teams to review new features from a security perspective, perform threat modeling, and conduct code reviews. In 12 months- Participate in building and maturing security capabilities and operations.- Ensure that new product releases are continuously being tested prior to being put into production.
<h3>What Will You Be Doing</h3>
<ul>
<li>Defining, maintaining, and implementing application security best practices to meet HITRUST requirements.</li><li>Owning Security SDLC plan and processes ensuring relevant tasks are completed and required artifacts are created and maintained.</li><li>Providing guidance to Engineering teams during design reviews including threat modeling.</li><li>Integrating security best practices and tooling into our CI/CD processes.</li><li>Evaluating the impact to the organization of current security advisories, publications, and trends.</li><li>Working with Security team and Product stakeholders to build a penetration testing schedule for all products and infrastructure.</li><li>Performing penetration tests and review web applications, source code, operating systems, and network security architectures; find vulnerabilities and define effective strategies for remediation and hardening.</li><li>Performing Red/Purple Team exercises to identify strengths and gaps in defensive tools and processes.</li><li>Explaining and demonstrating vulnerabilities to product stakeholders, provide remediation steps, and design solution prototypes and/or implement security enhancements.</li><li>Tracking and driving remediation efforts for discovered vulnerabilities in web applications and network ensuring they are patched according to the timeframes specified by policy.</li><li>Participating in building and maturing security capabilities and operations.</li><li>Ensuring that the Security Impact Analysis is completed for web/code changes as part of Change Management process.</li><li>Ensuring that all changes are properly tested in a separate test environment prior to being put into production.</li><li>Participating as a key member of Incident Response team as web application and network security SME focused on determining impact, root cause, and resolution associated.</li><li>Identifying, vetting, and coordinating third party vendors in meeting third-party application security testing requirements.</li></ul>
<h3>What You'll Bring</h3>
<ul>
<li>A passion for Application and Network Security with an attacker mindset.</li><li>3+ years of proven code review and penetration testing experience in both web applications and infrastructure; finding vulnerabilities and defining effective strategies for remediation and hardening.</li><li>Experience testing and securing infrastructure on cloud providers such as AWS/Azure.</li><li>Knowledge of the Secure SDLC.</li><li>A firm understanding of OWASP Top 10.</li><li>Experience with static and dynamic code analysis.</li><li>Strong scripting and development skills in languages such as Java, JavaScript, Ruby, Python.</li><li>Security certifications such as OSCP, OSCE, PNPT, EWPT, ECPTX.</li><li>Ability to write formal assessment reports and to explain vulnerabilities to different stakeholders.</li><li>Knowledge and understanding of attack surfaces and the ability to carry out APT style tactics, techniques, and procedures on enterprise systems and services.</li></ul>
<h3>Would Love For You To Have</h3>
<ul>
<li>Experience threat modeling SaaS products, cloud infrastructure, RESTful microservices, etc</li><li>Applied security research, cryptography, reverse engineering, and fuzzing experience.</li><li>Additional certifications such as OSWE, GPEN, GXPN, or CREST will be very desirable.</li><li>Experience in Vulnerability management within containerized environments</li><li>Strong IaaS security skills, with a focus on AWS</li><li>Understanding of Microsoft Windows Server/AD deployments</li><li>Experience conducting Red Team and Purple Team operations</li></ul>
<h3>What You'll Get</h3>
<ul>
<li>You will work with a team of experts in building and maintaining a highly validated security and privacy program for the leader in Population Health and Healthcare data analytics including experience with certifications such as HITRUST, ISO 27001, and SOC 2.</li><li>Be a part of a team and organization that has built security and privacy into the fabric and culture of the organization.</li><li>You will learn how to build and maintain a fully validated and industry leading security program.</li><li>Your responsibilities will grow with you as a critical member of our team.</li><li>Be a part of a mission driven company that is transforming the healthcare industry by changing the way patients receive care</li><li>A flexible, remote friendly company with personality and heart</li><li>Employee driven programs and initiatives for personal and professional development</li><li>Be a member of the Arcadian and Barkadian Community</li></ul>About Arcadia<a href="http://arcadia.io/" rel="noopener noreferrer nofollow ugc" target="_blank">Arcadia.io</a> helps innovative healthcare systems and health plans around the country transform healthcare to reduce cost while improving patient health.   We do this by aggregating massive amounts of clinical and claims data, applying algorithms to identify opportunities to provide better patient care, and making those opportunities actionable by physicians at the point of care in near-real time.  We are passionate about helping our customers drive meaningful outcomes. We are growing fast and have emerged as the market leader in the highly competitive population health management software and value-based care services markets, and we have been recognized by industry analysts KLAS, IDC, Forrester and Chilmark for our leadership. For a better sense of our brand and products, please explore our <a href="https://www.arcadia.io/about-arcadia/leadership/" rel="noopener noreferrer nofollow ugc" target="_blank">website</a>, our <a href="https://www.arcadia.io/resources/" rel="noopener noreferrer nofollow ugc" target="_blank">online resources</a>, and our interactive <a href="https://datagallery.arcadiasolutions.com/static/index.html" rel="noopener noreferrer nofollow ugc" target="_blank">Data Gallery</a>.This position is responsible for following all Security policies and procedures in order to protect all PHI under Arcadia's custodianship as well as Arcadia Intellectual Properties.  For any security-specific roles, the responsibilities would be further defined by the hiring manager.

Boston

Pittsburgh

Offensive Security Engineer

Snyk

<h3>All roles listed as ‘remote’ are available as remote within the same country.</h3>

<h3>Overview</h3>
Snyk is looking for a Senior Product Security Engineer with experience in the areas of application security, cloud native services and developing reusable security libraries. We are building out a world class Product Security function within Snyk’s R&amp;D function to support the company’s rapid growth. 
You will have a unique opportunity to help build and shape the technical capabilities and the overall product security programme. 
<h3>You’ll spend your time:</h3>
<ul>
<li>Building innovative solutions that extend Snyk’s Product Security capabilities</li>
<li>Working with architecture, product and engineering teams ensuring security is at the heart of everything we do</li>
<li>Collaborating with your peers to define software/infrastructure guardrails and security abstractions</li>
<li>Engineering solutions that enable teams to self-serve on meaningful security metrics &amp; tools leading to faster, safer code in production environments</li>
<li>Performing threat models and code reviews for products and services</li>
<li>Building out a best-in-breed application security pipeline for real time event monitoring and response</li>
<li>Triaging security reports and assessing risk</li>
</ul>
You should apply if you have:
<ul>
<li>3+ years of experience working in security teams</li>
<li>The ability to articulate security as a business enabler</li>
<li>2-3 years of experience writing battle tested production-level code</li>
<li>Strong understanding of cloud native ecosystems (AWS, GCP, or Azure)</li>
<li>Experience writing solid test cases and documentation</li>
<li>Experience doing content development for secure coding standards</li>
<li>Ability to work independently in a remote setting</li>
<li>Strong written and verbal communication skills</li>
</ul>
<h3>We’d especially love to hear from you if you:</h3>
<ul>
<li>5+ years of experience working in product security/ application security</li>
<li>5+ years of experience working in securing cloud platforms</li>
<li>Practical knowledge of common threats and exposures to web apps and services</li>
<li>Strong interest and experience in offensive security techniques</li>
<li>Experience working with architecture teams establishing common good practices</li>
<li>Information security certifications (e.g. OSCP, OSCE, AWAE, CKS, SANS)</li>
<li>Experience with either Golang, Python, Scala, Rust, TypeScript</li>
<li>Familiarity with data analysis / data science techniques</li>
<li>Bachelor’s degree in computer science, information security, or Information Technology</li>
</ul>
<h3>Interested?</h3>
Please apply below! We care deeply about the warm, inclusive environment we’ve created and we value diversity - we welcome applications from those typically underrepresented in tech. If you like the sound of this role, but are not totally sure whether you’re the right person, do apply anyway :)
<h3>About Snyk</h3>
Snyk’s mission is to help developers use open source code and stay secure. 
The use of open source is booming, but security is a key concern (<a href="https://snyk.io/stateofossecurity/" rel="noopener noreferrer nofollow ugc" target="_blank">https://snyk.io/stateofossecurity/</a>). Snyk’s unique product enables developers and enterprise security teams to continuously find &amp; fix vulnerable dependencies without slowing down, offering seamless integration into Dev, DevOps and DevSecOps workflows. We care deeply about the quality and usefulness of the tools we develop, always focusing on our customers and users. 
We are experiencing rapid growth - and we want you to join us! By the end of Q3 2019 alone, Snyk was already adopted by over 450,000 developers, and including multiple enterprise customers (such as Google, New Relic, ASOS and others). We also raised an additional $200 Million, <a href="https://snyk.io/blog/snyk-closes-200m-to-modernize-security-industry/" rel="noopener noreferrer nofollow ugc" target="_blank">announced on September 9, 2020</a>, from investors such as Stripes and Salesforce Ventures, demonstrating that they are as excited as we are by Snyk’s progress and potential.
We believe open source software is a force for good, and we’re building Snyk to make it easier for developers who aren’t security experts to stay secure
#LI-TF1
#LI-RemoteAbout Snyk
Snyk is the leader in developer security. We empower the world's developers to build secure applications and equip security teams to meet the demands of the digital world. Our developer-first approach ensures organizations can secure all of the critical components of their applications from code to cloud, leading to increased developer productivity, revenue growth, customer satisfaction, cost savings and an overall improved security posture. 
At Snyk, we envision an inclusive technology industry powering a more sustainable and secure world. Since our founding, Snykers have cared deeply for one another and the developer and security communities as well as the larger world around us. Learn more about our Snyk Impact social and environmental mission and take action with us <a href="https://snyk.io/about/snyk-impact/" rel="noopener noreferrer nofollow ugc" target="_blank">here.</a>
Snyk's Developer Security Platform automatically integrates with a developer's workflow and is purpose-built for security teams to collaborate with their development teams. Snyk is used by 1,200 customers worldwide today, including industry leaders such as Asurion, Google, Intuit, MongoDB, New Relic, Revolut and Salesforce.
Snyk is recognized on the <a href="https://www.forbes.com/cloud100/#6f24b5ba5f94" rel="noopener noreferrer nofollow ugc" target="_blank">Forbes Cloud 100 2021</a>, the <a href="https://www.cnbc.com/2021/05/25/these-are-the-2021-cnbc-disruptor-50-companies.html" rel="noopener noreferrer nofollow ugc" target="_blank">2021 CNBC Disruptor 50</a> and was named a Visionary in the<a href="https://snyk.io/blog/snyk-visionary-2021-gartner-magic-quadrant-for-ast/" rel="noopener noreferrer nofollow ugc" target="_blank"> 2021 Gartner Magic Quadrant for AST</a>.

Cluj

Senior Product Security Engineer

XOR Security

XOR Security is currently seeking several Cyber Hunt SME to support an Agency-level SOC at DHS. The SOC program provides comprehensive Computer Network Defense and Response support through 24×7×365 monitoring and analysis of potential threat activity targeting the enterprise.  Senior SOC analysts will conduct security event monitoring, advanced analytics and response activities in support of the CND operational mission.  The positions will respectively focus on Cyber Hunt, Detective Content Development, Malware Analysis, and Cyber Threat Intelligence (skills in more than one cyber discipline are preferred).  To support this vital mission, XOR staff are on the forefront of providing Advanced CND Operations, and Systems Engineering support to include the development of advanced analytics and countermeasures to protect critical assets from hostile adversaries.
To ensure the integrity, security and resiliency of critical operations, we are seeking candidates with diverse backgrounds in cyber security systems operations, analysis and incident response. Strong written and verbal communications skills are a must. The ideal candidate will have a solid understanding of cyber threats and information security in the domains of TTP’s, Threat Actors, Campaigns, and Observables. Additionally the ideal candidate would be familiar with intrusion detection systems, intrusion analysis, security information event management platforms, endpoint threat detection tools, and security operations ticket management.
Candidate must have the required Qualifications:
<ul>
<li>For a Senior, at least 5 years of experience in a cyber network defense environment.</li>
<li>Active top Secret and/or DHS Agency Clearance.</li>
<li>Strong analytical and technical skills in computer network defense operations, ability to lead efforts in Incident Handling (Detection, Analysis, Triage), Hunting (anomalous pattern detection and content management) and Malware Analysis.</li>
<li>Prior experience and ability to with analyzing information technology security events to discern events that qualify as a legitimate security incidents as opposed to non-incidents. This includes security event triage, incident investigation, implementing countermeasures, and conducting incident response.</li>
<li>Previous hands-on experience with a Security Information and Event Monitoring (SIEM) platforms and log management systems that perform log collection, analysis, correlation, and alerting is required (preferably within Splunk or ArcSight).</li>
<li>Ability to develop rules, filters, views, signatures, countermeasures and operationally relevant applications and scripts to support analysis and detection efforts.</li>
<li>Strong logical/critical thinking abilities, especially analyzing security events (windows event logs, Tanium queries, network traffic, IDS events for malicious intent).</li>
<li>Strong proficiency Report writing – a technical writing sample and technical editing test will be required if the candidate has no prior published intelligence analysis reporting, excellent verbal and written communications skills and ability produce clear and thorough security incident reports and briefings.</li>
<li>Excellent organizational and attention to details in tracking activities within various Security Operation workflows.</li>
<li>A working knowledge of the various operating systems (e.g. Windows, OS X, Linux, etc.) commonly deployed in enterprise networks, a conceptual understanding of Windows Active Directory is also required, and a working knowledge of network communications and routing protocols (e.g. TCP, UDP, ICMP, BGP, MPLS, etc.) and common internet applications and standards (e.g. SMTP, DNS, DHCP, SQL, HTTP, HTTPS, etc.).</li>
<li>Experience with the identification and implementation of counter-measures or mitigating controls for deployment and implementation in the enterprise network environment.</li>
<li>Experience in mentoring and training junior and mid-level analysts. </li>
</ul>
Desired Qualifications:
<ul>
<li>Bachelor’s Degree in Information Technology, Cyber Security, Computer Science, Computer Engineering, or Electrical Engineering.</li>
<li>One or more certifications for CND Analysts:  GCIA, GCED, GCFE, GCTI, GNFA, GCIH, CND, ECSA, OSCP, OSEE, OSCE.</li>
<li>One or more certifications for malware or forensic analysts:  GCFA, GCFE, GREM, CHFI.</li>
<li>Existing Subject Matter Expertise of Advanced Persistent Threat or Emerging Threats.</li>
<li>Expertise on policies, industry trends, techniques related to penetration testing.</li>
<li>Proficiency in utilizing various packet capture (PCAP) applications/engines and in the analysis of PCAP data.</li>
<li>Experience with one or more of the following technologies Network Threat Hunting (Sqrrl), Big Data Analytics (Splunk), Endpoint Threat Detection (Tanium), SIEM (ArcSight), workflow and ticketing (HP Service Manager), Intrusion Detection System (IBM ISS).</li>
<li>Ability to work on-call during critical incidents or to support coverage requirements (including weekends and holidays when required).</li>
<li>Familiarity with scripting languages (BASH, Powershell, Python, PERL, RUBY etc.) or software development frameworks (.NET).</li>
</ul>
Closing Statement:
XOR Security offers a very competitive benefits package including health insurance coverage from the first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance Requirement
Applicants selected may be subject to a government security investigation and must meet eligibility requirements - US CITIZENSHIP and TOP SECRET CLEARANCE REQUIRED!

Springfield

Cyber Hunt SME

CRI Group

Tasks: 
<ul>
<li>Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances, and host-based security systems</li>
<li>Develop and validate baseline security configurations for operating systems, applications, and networking and telecommunications equipment</li>
<li>Perform internal and external technical control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls, and recommend remedial action</li>
<li>Perform source code reviews</li>
<li>Perform network and application penetration testing ( Black box, Grey box and White box)</li>
<li>Defining detailed security architecture</li>
<li>Performing technical security audits</li>
<li>Perform log analysis and security monitoring</li>
<li>Perform IT infrastructure/ Application Security configuration reviews</li>
<li>Design and implement technical security mechanisms and technologies</li>
<li>Design and develop technical security standards and procedures</li>
</ul>
Tasks in more details:
<ol>
<li>Security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, system security appliances, and host‐based security systems</li>
<li>Plan, coordinate, and perform programming for all security systems and other IT integrated components to meet eu‐LISA and system operational needs</li>
<li>Review of design physical security systems installed as to meet eu‐LISA needs according to best industry practice and Agency guidelines</li>
<li>Perform internal and external technical control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls, and recommend remedial action.</li>
<li>Determine material quantities in the amounts needed to complete projects as per the first Agency planning for the current Building Project</li>
<li>Develop and create systems documentation, including full review and correction of systems drawings, systems installation drawings, and other systems documentation</li>
<li>Ensure that physical security systems are being installed, programmed, tested, and commissioned according to Agency needs and best practice standards</li>
<li>Ensure that physical security systems are being properly maintained, reprogrammed, retested, and repaired according to Agency needs and best practice standards</li>
<li>Performing technical and security audits as to ensure optimal security systems’ performance</li>
<li>Security monitoring and log analysis</li>
<li>Review of design of the GTC / Facility system connections to the Hypervision system as to allow effective monitoring of the well‐being of the Data center and all related equipment in order meet the business continuity needs and the best standards</li>
<li>Design and implement technical security mechanisms and technologies</li>
<li>Design and develop technical security standards and procedures.</li>
<li>Attend dedicated and administrator trainings as to master the security systems. Such would require the CCTV System training / Access System Training / Hypervision System training / Fire detection and extinguishing system and all related trainings (Facility system included) as to perform the works required</li>
<li>Develop and perform effective security systems training sessions for relevant staff, notably the Physical Security Coordinators and the Guarding Force.</li>
<li>Performing any other activity related to the security and management of the IT corporate infrastructure or other systems under eu‐LISA’s responsibility.</li>
</ol>
Education requirements:
<ul>
<li>Minimum 4 years of relevant education (master or equivalent) after the secondary</li>
</ul>
Minimum experience requirements:
<ul>
<li>Minimum 6 years of relevant professional experience in IT Security</li>
</ul>
Additional needed qualification, knowledge and skills: 
Expected to possess advanced knowledge of/in:
<ul>
<li>Security best practice guidelines (ISO 27001, NIST, SANS Top 20 OWASP, etc.)</li>
<li>Good practice in the secure configuration of servers, network devices and applications</li>
<li>Networking protocols and application communications</li>
<li>Network analysis tools</li>
<li>Securing Unix and Windows operating systems</li>
<li>Securing middleware and applications.</li>
<li>Network penetration testing</li>
<li>Web application penetration testing</li>
<li>Vulnerability assessments</li>
<li>Forensic image collection and analysis</li>
<li>Managing/deploying the following security technologies: Firewalls; IDS/IPS - Intrusion detection/Prevention Systems, SIEM – Security information and event management; IAM – Identity and access management; APT – Advanced Persistent threat detection; DLP – Data loss prevention; VA – Vulnerability Analysis and mitigation; PKI – Public key infrastructure; Virtual environments; Endpoint security; Mobile security; Communications and data encryption ; Remote access methods; Backup and disaster recovery methodologies; Patch management technologies and processes; Wireless protocols and services</li>
<li>Open Web Application Security Protocol (OWASP) and secure software development standards</li>
<li>Performing security code reviews.</li>
<li>Security monitoring, threat detection and incident response;</li>
<li>Proactively and iteratively searching through networks and applications to detect and isolate advanced threats that evade existing security solutions (Cyber threat hunting);</li>
<li>Security operations engineering (e.g. implementation of defensive measures, threat intelligence production);</li>
<li>Linux administration, TCP/IP, Network Security.</li>
<li>Security configuration reviews of IT Infrastructure and security devices, OS, Databases etc.Expected to possess one or more of the following qualifications:
<ul>
<li>Certified Information Systems Security Professional with Information Systems Security Architecture Professional concentration (CISSP-ISSAP)</li>
<li>Certified Information Security Manager (CISM)</li>
<li>Certified Information Systems Auditor (CISA)</li>
<li>OSCP, OSCE, GPEN, CEH, CCNA, CCNP</li>
</ul>
</li>
</ul>
Security clearance requirements: 
<ul>
<li>EU Secret</li>
</ul>
WHO WE ARE?
CRI company part of VASS Group, leads the digital transformation and cyber security in the European Union.
CRI operates serving the European Union Institutions, telecom operators, financial institutions and governmental bodies through a comprehensive offering of services and technologies.
Please visit our website and let's get in touch: <a href="https://cri-group.eu/" rel="noopener noreferrer nofollow ugc" target="_blank">www.cri-group.eu</a>

Strasbourg

IT Security Specialist

Ninja Van

Ninja Van is a late-stage logtech startup that is disrupting a massive industry with innovation and cutting edge technology. Launched 2014 in Singapore, we have grown rapidly to become one of Southeast Asia's largest and fastest-growing express logistics companies. Since our inception, we’ve delivered to 100 million different customers across the region with added predictability, flexibility and convenience. Join us in our mission to connect shippers and shoppers across Southeast Asia to a world of new possibilities. More about us: - We process 250 million API requests and 3TB of data every day.- We deliver more than 1.5 million parcels every day.- 100% network coverage with 1000+ hubs and stations in 6 SEA markets (Singapore, Malaysia, Indonesia, Thailand, Vietnam and Philippines), reaching 500 million consumers.- 600,000 active shippers in all e-commerce segments, from the largest marketplaces to the individual social commerce sellers.- Raised more than US$500 million over five rounds.We are looking for world-class talent to join our crack team of engineers, product managers and designers. We want people who are passionate about creating software that makes a difference to the world. We like people who are brimming with ideas and who take initiative rather than wait to be told what to do. We prize team-first mentality, personal responsibility and tenacity to solve hard problems and meet deadlines. As part of a small and lean team, you will have a very direct impact on the success of the company. You need to have knowledge in securing inhouse developed products by performing Web Application, Mobile and API security testing with knowledge of OWASP Top 10 vulnerabilities.As a team member, you will work with engineering teams to build secure products. Being part of our team, you will manage a portfolio of Web Application’s, Mobile Application Security and API’s Security. There would also be knowledge sharing sessions by attending various security conferences, trainings and internal hackathons.
<h3>Role and Responsibilities </h3>
<ul>
<li> Work individually or as a part of team conducting manual code reviews, static vulnerability scanning, vulnerability validations and false positive analysis                                                                         </li><li> Enhance existing application security tools and introduce new tools where applicable                                                                                 </li><li> Perform Application Security assessment and sometimes manual code reviews of web applications, web services, mobile, front-end &amp; back-end services                     </li><li>Work closely with software engineers from the various development teams to build a secure architecture and coding standard across the organization                             </li><li>Communicate technical and business risk of the vulnerabilities discovered including remediation recommendations      </li><li>Work with internal teams to support them in remediation efforts</li><li>Keep abreast with latest technology risks and utilize them in work                                                                            </li><li>Contribute to the information security strategy and rollout of the strategy</li></ul>
<h3>Requirements</h3>
<ul>
<li>Degree in Computer Science and Engineering </li><li>Experience in Application Security and Code Reviews with sufficient security background (5+ years in Security and 2+ years in software development)</li><li>Experience with penetration testing tools and tool suites such as Burp Suite Pro, OWASP Zap, Postman, Kali Linux, SQLMap, Nessus, etc.</li><li>Experience in web application security, mobile security, API security with knowledge of application vulnerabilities and business logic flaws and threats</li><li>Programming language skills such as Java, ReactJs,NodeJs Javascript (nice to have).</li><li>Experience in security risk assessment and threat modeling of applications</li><li>Familiarity with Google, Kubernetes, Docker, and Terraform</li><li>Excellent language skills and ability communicate complex vulnerabilities to internal teams</li><li>Well versed with OWASP Code Review Guide</li><li>Ability to triage results from automated code scanning tools for false positives and false negatives</li><li>Certifications such as GPEN, GXPN, GMOB, GWAPT, OSWE, OSCP, OSCE, OSWP,CNCF, AWS (Preferred) </li></ul>Submit a job applicationBy applying to the job, you acknowledge that you have read, understood and agreed to our Privacy Policy Notice (the “Notice”) and consent to the collection, use and/or disclosure of your personal data by Ninja Logistics Pte Ltd (the “Company”) for the purposes set out in the Notice. In the event that your job application or personal data was received from any third party pursuant to the purposes set out in the Notice, you warrant that such third party has been duly authorised by you to disclose your personal data to us for the purposes set out in the the Notice.

Singapore

Application Security Analyst

Apply to OSCE Cyber Security Jobs in companies remotely and near you. New OSCE Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Offensive Security Engineer at Arcadia	Remote Full Time Red Team Manager Incident Response
Senior Product Security Engineer at Snyk	Remote Full Time Devsecops Application Security AWS
Cyber Hunt SME at XOR Security	Active Directory Analytics Arcsight BASH Big Data
IT Security Specialist at CRI Group	Application Security APT Audits Black Box CEH
Application Security Analyst at Ninja Van	Application Security AWS Burp Suite Docker GPEN

OSCE Cyber Security Jobs

0 OSCE Cyber Security Jobs. Page 1 of 1

5 closed osce cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

OSCE Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

OSCE Cyber Security Jobs

0 OSCE Cyber Security Jobs. Page 1 of 1

5 closed osce cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

OSCE Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter