Arctic Wolf Networks

<p>Ready to make an impact? Arctic Wolf is looking for an <strong>Application Security Architect</strong> to join our pack.</p>
<p>Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity.</p>
<p>How fast are we growing? Well, Arctic Wolf was highly ranked in the Deloitte Fast Technology 500 for NorthAmerica in both 2019 (#25) and 2020 (#104)! We have doubled headcount, customers, and revenue for five years running. We are also cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow our teams globally.</p>
<p>In fact, we were named a 2021 Top Workplace USA (Energage) as the top technology firm to work in our size category, were recognized as one of the 2020 Best Places to Work (bizjournals.com), and most recently were certified as a 2021 Great Place to Work (Great Places to Work Institute, Canada). Arctic Wolf believes in corporate responsibility, and our worldwide offices proudly participate in volunteer programs throughout their communities. We’ve also earned distinction from TravelWise for our efforts in promoting sustainable transportation.</p>
<p><strong>Position Overview and Objective</strong></p>
<p>The Lead Application Security Architect role is responsible for the implementation of measures to ensure the security of Arctic Wolf software systems, applications, code, and related components. This role will work within our Information Security Engineering team to deploy and operationalize technical security capabilities with open collaboration with the Research and Development Team.</p>
<p><strong>Primary Responsibilities and Duties</strong></p>
<ul>
<li>Develop secure coding &amp; secure design principles</li>
<li>Train developers, architects, code reviewers, and others on secure coding practices. Mentor team members.</li>
<li>Serve as the subject matter expert for Application Security, providing guidance to Engineering and Product teams</li>
<li>Develop standards and training for security testing tools focused on the application layer (e.g., SAST, DAST, IAST, SCA), threat modeling, penetration testing, red team, bug bounty and</li>
<li>Work with development teams throughout the entire SDLC to ensure code is secure by design, secure by default, secure in deployment and communication</li>
<li>Help software development teams to understand, and remediate security findings</li>
<li>Research any reported or suspected application vulnerabilities</li>
<li>Implement and configure off-the-shelf application security technologies in the Arctic Wolf internal environment.</li>
<li>Create technical approaches to implementing application security control technologies.</li>
<li>Contribute to a world-class security program that supports Arctic Wolf’s tremendous growth.</li>
<li>Mentors and coaches team members to further develop competencies</li>
<li>Assist in developing security related libraries used in our environment</li>
<li>Security metrics delivery and improvements.</li>
<li>The ability to effectively partner and communicate with Engineering and Product teams</li>
</ul>
<p><strong>Key Skills</strong></p>
<p>Communication, Threat modeling, Code Review, Penetration Testing, Application Testing, Research</p>
<p><strong>Key Competencies</strong></p>
<p>Is able to write clearly and succinctly in a variety of communication settings and styles; can get messages across that have the desired effect.</p>
<p>Comes up with a lot of new and unique ideas; easily makes connections among previously unrelated notions; tends to be seen as original and value-added in brainstorming settings.</p>
<p>Can be counted on to exceed goals successfully; is constantly and consistently one of the top performers; very bottom-line oriented; steadfastly pushes self and others for results.</p>
<p><strong>Minimum Qualifications</strong></p>
<ul>
<li>A Bachelor’s Degree in Computer Science, Information Systems, Engineering, cybersecurity or related technical field; or equivalent experience.</li>
<li>10+ years of experience in security or infrastructure engineering Including assessing and escalating to vendors for troubleshooting purposes.</li>
<li>Thorough Understanding of modern software development practices</li>
<li>Thorough understanding of OWASP Top 10 vulnerabilities and corresponding best practices for mitigation</li>
<li>Significant experience in deploying application security technologies such as SAST, DAST, IAST, SCA, etc.</li>
</ul>
<p><strong>Preferred Qualifications</strong></p>
<ul>
<li>Familiarity with cloud infrastructures, with Amazon Web Services (AWS) and/or Azure considered a strong plus.</li>
<li>Expert level analytical and quantitative skills with proven experience in developing strategic solutions</li>
<li>Significant prior experience securing large-scale web applications, including performing security code reviews, vulnerability assessments, and manual testing for logic flaws</li>
<li>Significant Experience in one or more highly regulated environments (FedRAMP, SOX, ISO 27001, etc) or frameworks</li>
<li>Presentation of a security topic and an industry conference</li>
<li>One a more Industry Certifications – (CISSP, CCSP, CSLP, OSCP, OSWE, GPEN, GWAPT, CEH, etc)</li>
</ul>
<p><strong>Travel Requirements</strong></p>
<p>Typically 10% or less of business travel</p>
<p><strong>Security Requirements:</strong></p>
<ul>
<li>Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information.</li>
<li>Background checks are required for this position</li>
</ul>
<p><strong>About us:</strong></p>
<p>At Arctic Wolf, we recognize that success comes from delighting our customers. We believe in being lean – in constantly building, measuring, and learning in all aspects of our business. We truly value people. All wolves are welcome to join the Arctic Wolf pack, with compelling compensation packages, benefits, and equity for employees.</p>
<p>Arctic Wolf is focused on building a workforce that is diverse and inclusive. If you’re excited about this role, but do not meet all of the qualifications listed above, we encourage you to apply. We review all applications.  </p>
<p>Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law.</p>
<p>Arctic Wolf is committed to fostering a welcoming, accessible, respectful and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our recruitment, assessment and selection processes as accessible as possible and provide accommodations as required for applicants with disabilities. Please let us know if you require any accommodations by emailing <a href="mailto:hr@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>. </p>

Provo

Principal Application Security Architect

Arcadia

Due to Covid–19 we are working 100% remotely, this includes the hiring process. When it is safe to do so, we will return to a hybrid of onsite and remote work for some positions.Why This Role Is Important To Arcadia Arcadia is looking for an Offensive Security Engineer to report directly to our VP of Security, Privacy &amp; Compliance.  In this multi-faceted role, you will be an integral part of our Security team, responsible for designing, conducting and reporting on penetration tests against components of our SaaS web application. You will also work with software developers to ensure secure coding and assist with the remediation of any vulnerabilities identified. The Offensive Security Engineer will work as a member for the Information Security team focused on ensuring the security of Arcadia’s Population Health Analytics portfolio through application security testing, code review, and risk/impact analysis of proposed changes and features. This role will partner with both engineering and product to ensure that security requirements are consistently considered and addressed throughout the development and operational lifecycle including ownership of the SDLC Security plan, code review and remediation, pre-production and ongoing application security testing, vulnerability tracking and remediation.The right Offensive Security Engineer can work independently and follow up with various lines of business as needed to ensure timely testing of the application and closure of any findings.  We are looking for someone who is passionate about finding and fixing application vulnerabilities and will be hyper-vigilant in ensuring that all facets of our SaaS web application is secure against attackers.What Success Looks LikeIn 3 months- Plan and execute penetration tests against web applications and infrastructure; produce reports for stakeholders.- Ensure the implementation of HITRUST controls related to Secure Application Development.- Participate in Information Security &amp; Privacy Steering Committee Meetings.- Conduct code reviews. In 6 months- Track remediation efforts for discovered vulnerabilities and ensure they are patched according to the timeframes specified.- Work with Product and Engineering teams to review new features from a security perspective, perform threat modeling, and conduct code reviews. In 12 months- Participate in building and maturing security capabilities and operations.- Ensure that new product releases are continuously being tested prior to being put into production.
<h3>What Will You Be Doing</h3>
<ul>
<li>Defining, maintaining, and implementing application security best practices to meet HITRUST requirements.</li><li>Owning Security SDLC plan and processes ensuring relevant tasks are completed and required artifacts are created and maintained.</li><li>Providing guidance to Engineering teams during design reviews including threat modeling.</li><li>Integrating security best practices and tooling into our CI/CD processes.</li><li>Evaluating the impact to the organization of current security advisories, publications, and trends.</li><li>Working with Security team and Product stakeholders to build a penetration testing schedule for all products and infrastructure.</li><li>Performing penetration tests and review web applications, source code, operating systems, and network security architectures; find vulnerabilities and define effective strategies for remediation and hardening.</li><li>Performing Red/Purple Team exercises to identify strengths and gaps in defensive tools and processes.</li><li>Explaining and demonstrating vulnerabilities to product stakeholders, provide remediation steps, and design solution prototypes and/or implement security enhancements.</li><li>Tracking and driving remediation efforts for discovered vulnerabilities in web applications and network ensuring they are patched according to the timeframes specified by policy.</li><li>Participating in building and maturing security capabilities and operations.</li><li>Ensuring that the Security Impact Analysis is completed for web/code changes as part of Change Management process.</li><li>Ensuring that all changes are properly tested in a separate test environment prior to being put into production.</li><li>Participating as a key member of Incident Response team as web application and network security SME focused on determining impact, root cause, and resolution associated.</li><li>Identifying, vetting, and coordinating third party vendors in meeting third-party application security testing requirements.</li></ul>
<h3>What You'll Bring</h3>
<ul>
<li>A passion for Application and Network Security with an attacker mindset.</li><li>3+ years of proven code review and penetration testing experience in both web applications and infrastructure; finding vulnerabilities and defining effective strategies for remediation and hardening.</li><li>Experience testing and securing infrastructure on cloud providers such as AWS/Azure.</li><li>Knowledge of the Secure SDLC.</li><li>A firm understanding of OWASP Top 10.</li><li>Experience with static and dynamic code analysis.</li><li>Strong scripting and development skills in languages such as Java, JavaScript, Ruby, Python.</li><li>Security certifications such as OSCP, OSCE, PNPT, EWPT, ECPTX.</li><li>Ability to write formal assessment reports and to explain vulnerabilities to different stakeholders.</li><li>Knowledge and understanding of attack surfaces and the ability to carry out APT style tactics, techniques, and procedures on enterprise systems and services.</li></ul>
<h3>Would Love For You To Have</h3>
<ul>
<li>Experience threat modeling SaaS products, cloud infrastructure, RESTful microservices, etc</li><li>Applied security research, cryptography, reverse engineering, and fuzzing experience.</li><li>Additional certifications such as OSWE, GPEN, GXPN, or CREST will be very desirable.</li><li>Experience in Vulnerability management within containerized environments</li><li>Strong IaaS security skills, with a focus on AWS</li><li>Understanding of Microsoft Windows Server/AD deployments</li><li>Experience conducting Red Team and Purple Team operations</li></ul>
<h3>What You'll Get</h3>
<ul>
<li>You will work with a team of experts in building and maintaining a highly validated security and privacy program for the leader in Population Health and Healthcare data analytics including experience with certifications such as HITRUST, ISO 27001, and SOC 2.</li><li>Be a part of a team and organization that has built security and privacy into the fabric and culture of the organization.</li><li>You will learn how to build and maintain a fully validated and industry leading security program.</li><li>Your responsibilities will grow with you as a critical member of our team.</li><li>Be a part of a mission driven company that is transforming the healthcare industry by changing the way patients receive care</li><li>A flexible, remote friendly company with personality and heart</li><li>Employee driven programs and initiatives for personal and professional development</li><li>Be a member of the Arcadian and Barkadian Community</li></ul>About Arcadia<a href="http://arcadia.io/" rel="noopener noreferrer nofollow ugc" target="_blank">Arcadia.io</a> helps innovative healthcare systems and health plans around the country transform healthcare to reduce cost while improving patient health.   We do this by aggregating massive amounts of clinical and claims data, applying algorithms to identify opportunities to provide better patient care, and making those opportunities actionable by physicians at the point of care in near-real time.  We are passionate about helping our customers drive meaningful outcomes. We are growing fast and have emerged as the market leader in the highly competitive population health management software and value-based care services markets, and we have been recognized by industry analysts KLAS, IDC, Forrester and Chilmark for our leadership. For a better sense of our brand and products, please explore our <a href="https://www.arcadia.io/about-arcadia/leadership/" rel="noopener noreferrer nofollow ugc" target="_blank">website</a>, our <a href="https://www.arcadia.io/resources/" rel="noopener noreferrer nofollow ugc" target="_blank">online resources</a>, and our interactive <a href="https://datagallery.arcadiasolutions.com/static/index.html" rel="noopener noreferrer nofollow ugc" target="_blank">Data Gallery</a>.This position is responsible for following all Security policies and procedures in order to protect all PHI under Arcadia's custodianship as well as Arcadia Intellectual Properties.  For any security-specific roles, the responsibilities would be further defined by the hiring manager.

Boston

Pittsburgh

Offensive Security Engineer

Network Guard

<h3>Senior Application Security Engineer</h3>
<p>If you’re passionate about security and privacy, and want to use your skills to help safeguard private, uncensored access to the internet for millions of customers, we’d love to speak with you. </p>
<p>We provide a highly dynamic working environment where you’ll get to work with some of the best privacy and security focused individuals across multiple disciplines, where room for learning and growth are plentiful. </p>
<p>As a senior individual contributor on our Offensive Security team, you’ll have a broad set of responsibilities including:</p>
<ul>
<li>Prepare and execute penetration testing projects of our assets, services and applications, either individually or as part of a team with members across various geographic locations such as Singapore, Hong Kong, Poland and London.</li>
<ul>
<li>We operate across a wide range of technologies, from client facing applications written in various languages for various platforms, to backend infrastructure and services, and router firmware. We provide an environment where you’ll be exposed to a wide range of technologies that form our <a href="https://www.expressvpn.com/jobs/tech-stack" rel="noopener noreferrer nofollow ugc" target="_blank">tech stack</a>.</li>
<li>You’ll need a strong white-box testing methodology and the ability to identify bugs in source code to go along with good organization and communication skills when delivering penetration tests of our applications and services.</li>
</ul>
<li>Work closely with the engineering teams to provide expert guidance and advice on remediation of identified vulnerabilities</li>
<li>Verify the existence of newly discovered vulnerabilities in our software stack, including triaging and verifying bugs from our bug bounty program and automated scanners, and develop novel attack vectors based on these </li>
<li>Manage and support penetration testing services performed by outside vendors, from project inception, scoping, completion of the assessment, and finally, working with engineering teams to have the identified issues remediated</li>
<li>Bring creative solutions to fruition for solving some of the complex security challenges faced by our organization, and provide security reviews on technical design documents for our solutions</li>
<li>Mentor, guide and support other team members using your strong technical knowledge</li>
<li>Identify inefficiencies in the team’s workflow, suggest solutions and drive them to completion</li>
</ul>
<p>This role focuses strongly on your ability to perform application penetration testing (specifically, desktop and server applications, with some focus on web applications). To be a good fit for this role and efficiently deliver projects, we are looking for individuals with the following skills and abilities.</p>
<p><strong>Suggested Skills</strong></p>
<ul>
<li>Identify vulnerabilities, misconfigurations and deviations from best practices within applications by means of manual source code review, static code analysis, and/or fuzzing using Burp Suite, AFL or similar tooling. We expect vulnerabilities to be identified and exploited up to the levels of OSCP, OSWE or OSED</li>
<li>Experience in identifying and exploiting remote code execution vulnerabilities, as well as IP and DNS leaks</li>
<li>Analyze application binaries, shared libraries, and browser extensions through the use of debuggers and reverse engineering tools to understand the components of the application and assess their security posture, as well as how they interact with the underlying operating system</li>
<li>Experience writing scripts in languages such as: Python, bash, or Golang to showcase your proof of concept</li>
<li>Provide mentorship and guidance to other team members and share knowledge and findings with them</li>
<li>Good knowledge of:</li>
<ul>
<li>TCP/IP, IDS/IPS, firewalls, WAF, and web content filtering</li>
<li>Cryptography: PGP, SSH, PKI</li>
</ul>
</ul>
<p>The skills listed above are not targeted to one specific platform. The ideal candidate should have strong knowledge and skills in one or more of the following areas:</p>
<ul>
<li>Windows, Linux or macOS thick client applications, and their OS interactions</li>
<li>Cloud security assessment or design review capabilities</li>
<li>Mobile application security assessment capabilities</li>
<li>Identify vulnerabilities in protocol implementations or system architecture</li>
</ul>
<p>Finally, candidates with strong experience in manual source code review and vulnerability research, or a strong track record in this area (e.g. CTFs, bug bounty program activity, published CVEs) are preferred.</p>
<h3>What we offer:</h3>
<ul>
<li>Challenging work in a fun and collaborative environment</li>
<ul>
<li>Everyone’s voice matters and everyone is encouraged to provide input on issues we’re trying to solve or improvements we’re aiming to make. Anyone can bring ideas to the table.</li>
<li>If there is an initiative that matters to you and improves the workplace or our processes, propose it, and we’ll help you drive it to completion</li>
</ul>
<li>Time allocated for regular team building activities, including games and CTFs</li>
<li>Attractive compensation and time-off benefits</li>
<li>Spacious open-concept and centrally located offices</li>
<li>Full-time employment with flexible working hours</li>
<li>Fully stocked pantry with fresh fruit and snacks</li>
<li>Team lunches and company events every quarter</li>
<li>Multicultural teams represented by 30+ nationalities</li>
<li>Reports to the Offensive Security Manager</li>
</ul>

新加坡國際學校 Singapore International School

Senior Application Security Engineer

ExpressVPN

<h3>Senior Application Security Engineer</h3>
<p>If you’re passionate about security and privacy, and want to use your skills to help safeguard private, uncensored access to the internet for millions of customers, we’d love to speak with you. </p>
<p>We provide a highly dynamic working environment where you’ll get to work with some of the best privacy and security focused individuals across multiple disciplines, where room for learning and growth are plentiful. </p>
<p>As a senior individual contributor on our Offensive Security team, you’ll have a broad set of responsibilities including:</p>
<ul>
<li>Prepare and execute penetration testing projects of our assets, services and applications, either individually or as part of a team with members across various geographic locations such as Singapore, Hong Kong, Poland and London.</li>
<ul>
<li>We operate across a wide range of technologies, from client facing applications written in various languages for various platforms, to backend infrastructure and services, and router firmware. We provide an environment where you’ll be exposed to a wide range of technologies that form our <a href="https://www.expressvpn.com/jobs/tech-stack" rel="noopener noreferrer nofollow ugc" target="_blank">tech stack</a>.</li>
<li>You’ll need a strong white-box testing methodology and the ability to identify bugs in source code to go along with good organization and communication skills when delivering penetration tests of our applications and services.</li>
</ul>
<li>Work closely with the engineering teams to provide expert guidance and advice on remediation of identified vulnerabilities</li>
<li>Verify the existence of newly discovered vulnerabilities in our software stack, including triaging and verifying bugs from our bug bounty program and automated scanners, and develop novel attack vectors based on these </li>
<li>Manage and support penetration testing services performed by outside vendors, from project inception, scoping, completion of the assessment, and finally, working with engineering teams to have the identified issues remediated</li>
<li>Bring creative solutions to fruition for solving some of the complex security challenges faced by our organization, and provide security reviews on technical design documents for our solutions</li>
<li>Mentor, guide and support other team members using your strong technical knowledge</li>
<li>Identify inefficiencies in the team’s workflow, suggest solutions and drive them to completion</li>
</ul>
<p>This role focuses strongly on your ability to perform application penetration testing (specifically, desktop and server applications, with some focus on web applications). To be a good fit for this role and efficiently deliver projects, we are looking for individuals with the following skills and abilities.</p>
<p><strong>Suggested Skills</strong></p>
<ul>
<li>Identify vulnerabilities, misconfigurations and deviations from best practices within applications by means of manual source code review, static code analysis, and/or fuzzing using Burp Suite, AFL or similar tooling. We expect vulnerabilities to be identified and exploited up to the levels of OSCP, OSWE or OSED</li>
<li>Experience in identifying and exploiting remote code execution vulnerabilities, as well as IP and DNS leaks</li>
<li>Analyze application binaries, shared libraries, and browser extensions through the use of debuggers and reverse engineering tools to understand the components of the application and assess their security posture, as well as how they interact with the underlying operating system</li>
<li>Experience writing scripts in languages such as: Python, bash, or Golang to showcase your proof of concept</li>
<li>Provide mentorship and guidance to other team members and share knowledge and findings with them</li>
<li>Good knowledge of:</li>
<ul>
<li>TCP/IP, IDS/IPS, firewalls, WAF, and web content filtering</li>
<li>Cryptography: PGP, SSH, PKI</li>
</ul>
</ul>
<p>The skills listed above are not targeted to one specific platform. The ideal candidate should have strong knowledge and skills in one or more of the following areas:</p>
<ul>
<li>Windows, Linux or macOS thick client applications, and their OS interactions</li>
<li>Cloud security assessment or design review capabilities</li>
<li>Mobile application security assessment capabilities</li>
<li>Identify vulnerabilities in protocol implementations or system architecture</li>
</ul>
<p>Finally, candidates with strong experience in manual source code review and vulnerability research, or a strong track record in this area (e.g. CTFs, bug bounty program activity, published CVEs) are preferred.</p>
<h3>What we offer:</h3>
<ul>
<li>Challenging work in a fun and collaborative environment</li>
<ul>
<li>Everyone’s voice matters and everyone is encouraged to provide input on issues we’re trying to solve or improvements we’re aiming to make. Anyone can bring ideas to the table.</li>
<li>If there is an initiative that matters to you and improves the workplace or our processes, propose it, and we’ll help you drive it to completion</li>
</ul>
<li>Time allocated for regular team building activities, including games and CTFs</li>
<li>Attractive compensation and time-off benefits</li>
<li>Spacious open-concept and centrally located offices</li>
<li>Full-time employment with flexible working hours</li>
<li>Fully stocked pantry with fresh fruit and snacks</li>
<li>Team lunches and company events every quarter</li>
<li>Multicultural teams represented by 30+ nationalities</li>
<li>Reports to the Offensive Security Manager</li>
</ul><h3><strong>Hiring process</strong></h3>
<p>When it comes to hiring processes, “rigorous” and “opaque” are often mistakenly conflated. For us, it’s always a mutual exchange, so we think it’s important that candidates have a clear understanding of the process and what we’re looking for. Learn more about the<a href="https://www.expressvpn.com/jobs/hiring-process" rel="noopener noreferrer nofollow ugc" target="_blank"> hiring process</a> by visiting our careers page.</p>
<h3><strong>Benefits</strong></h3>
<p>Health and happiness go hand in hand, and we make every effort to support our team members in all facets of their lives—both inside and outside the office. Learn more about our<a href="https://www.expressvpn.com/jobs#benefits" rel="noopener noreferrer nofollow ugc" target="_blank"> employee benefits</a> by visiting our careers page.</p>
<h3><strong>Before you apply</strong></h3>
<ul>
<li>At the moment, we do not sponsor visas in the <strong>UK </strong>and the <strong>EU</strong>. For <strong>Hong Kong</strong>, we require at least two years of working experience and a university degree in a related field. For<strong> Singapore</strong>, we can only sponsor visas for mid-career or above.</li>
<li>Please upload your resume as a <strong>PDF</strong> and do not include any salary or compensation information in it.</li>
</ul>
<p><em>ExpressVPN is one of the world’s leading providers of online privacy and security services for consumers. Started in 2009, we’ve grown to have millions of active paying customers, a team of more than 700 people worldwide, and a brand recognized by hundreds of millions of people in 18 languages and more than a hundred countries. We see huge growth in our industry, and are gaining market share through strong execution.</em></p>

Ninja Van

Ninja Van is a late-stage logtech startup that is disrupting a massive industry with innovation and cutting edge technology. Launched 2014 in Singapore, we have grown rapidly to become one of Southeast Asia's largest and fastest-growing express logistics companies. Since our inception, we’ve delivered to 100 million different customers across the region with added predictability, flexibility and convenience. Join us in our mission to connect shippers and shoppers across Southeast Asia to a world of new possibilities. More about us: - We process 250 million API requests and 3TB of data every day.- We deliver more than 1.5 million parcels every day.- 100% network coverage with 1000+ hubs and stations in 6 SEA markets (Singapore, Malaysia, Indonesia, Thailand, Vietnam and Philippines), reaching 500 million consumers.- 600,000 active shippers in all e-commerce segments, from the largest marketplaces to the individual social commerce sellers.- Raised more than US$500 million over five rounds.We are looking for world-class talent to join our crack team of engineers, product managers and designers. We want people who are passionate about creating software that makes a difference to the world. We like people who are brimming with ideas and who take initiative rather than wait to be told what to do. We prize team-first mentality, personal responsibility and tenacity to solve hard problems and meet deadlines. As part of a small and lean team, you will have a very direct impact on the success of the company. You need to have knowledge in securing inhouse developed products by performing Web Application, Mobile and API security testing with knowledge of OWASP Top 10 vulnerabilities.As a team member, you will work with engineering teams to build secure products. Being part of our team, you will manage a portfolio of Web Application’s, Mobile Application Security and API’s Security. There would also be knowledge sharing sessions by attending various security conferences, trainings and internal hackathons.
<h3>Role and Responsibilities </h3>
<ul>
<li> Work individually or as a part of team conducting manual code reviews, static vulnerability scanning, vulnerability validations and false positive analysis                                                                         </li><li> Enhance existing application security tools and introduce new tools where applicable                                                                                 </li><li> Perform Application Security assessment and sometimes manual code reviews of web applications, web services, mobile, front-end &amp; back-end services                     </li><li>Work closely with software engineers from the various development teams to build a secure architecture and coding standard across the organization                             </li><li>Communicate technical and business risk of the vulnerabilities discovered including remediation recommendations      </li><li>Work with internal teams to support them in remediation efforts</li><li>Keep abreast with latest technology risks and utilize them in work                                                                            </li><li>Contribute to the information security strategy and rollout of the strategy</li></ul>
<h3>Requirements</h3>
<ul>
<li>Degree in Computer Science and Engineering </li><li>Experience in Application Security and Code Reviews with sufficient security background (5+ years in Security and 2+ years in software development)</li><li>Experience with penetration testing tools and tool suites such as Burp Suite Pro, OWASP Zap, Postman, Kali Linux, SQLMap, Nessus, etc.</li><li>Experience in web application security, mobile security, API security with knowledge of application vulnerabilities and business logic flaws and threats</li><li>Programming language skills such as Java, ReactJs,NodeJs Javascript (nice to have).</li><li>Experience in security risk assessment and threat modeling of applications</li><li>Familiarity with Google, Kubernetes, Docker, and Terraform</li><li>Excellent language skills and ability communicate complex vulnerabilities to internal teams</li><li>Well versed with OWASP Code Review Guide</li><li>Ability to triage results from automated code scanning tools for false positives and false negatives</li><li>Certifications such as GPEN, GXPN, GMOB, GWAPT, OSWE, OSCP, OSCE, OSWP,CNCF, AWS (Preferred) </li></ul>Submit a job applicationBy applying to the job, you acknowledge that you have read, understood and agreed to our Privacy Policy Notice (the “Notice”) and consent to the collection, use and/or disclosure of your personal data by Ninja Logistics Pte Ltd (the “Company”) for the purposes set out in the Notice. In the event that your job application or personal data was received from any third party pursuant to the purposes set out in the Notice, you warrant that such third party has been duly authorised by you to disclose your personal data to us for the purposes set out in the the Notice.

Singapore

Application Security Analyst

Apply to OSWE Cyber Security Jobs in companies remotely and near you. New OSWE Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Principal Application Security Architect at Arctic Wolf Networks	Remote Full Time Red Team CCSP Application Security
Offensive Security Engineer at Arcadia	Remote Full Time Red Team Manager Incident Response
Senior Application Security Engineer at Network Guard	Application Security BASH Burp Suite Cloud Code Analysis
Senior Application Security Engineer at ExpressVPN	Application Security BASH Burp Suite Cloud Code Analysis
Application Security Analyst at Ninja Van	Application Security AWS Burp Suite Docker GPEN

OSWE Cyber Security Jobs

0 OSWE Cyber Security Jobs. Page 1 of 1

5 closed oswe cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

OSWE Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

OSWE Cyber Security Jobs

0 OSWE Cyber Security Jobs. Page 1 of 1

5 closed oswe cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

OSWE Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter