Staff Application Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take charge of the configuration, optimization, and administration of the SIEM solution.

• Analyze complex threats through advanced examination and create security alerts at various levels.

• Conduct reviews of architecture, code, and infrastructure settings.

• Execute basic penetration testing on web and mobile applications.

• Determine the root causes of vulnerabilities and address them effectively.

• Manage and enhance a vulnerability management CI/CD pipeline within the container and application delivery ecosystem.

• Collaborate with development and infrastructure teams to implement secure coding standards and remediation tactics.

• Develop and sustain enterprise-level security frameworks and tools.

• Participate in incident response and forensic analysis.

• Keep abreast of emerging threats and offer insights to development teams.

• Assist in creating security training programs and enhancing the organization’s overall security posture.

⛳️ Requirements

• Proficient in one or more programming languages, including Ruby, Java, Python, C#, or Node.js.

• Experienced in managing SIEM solutions and creating effective alert systems.

• Solid understanding of Docker and Kubernetes.

• Practical experience in automated container vulnerability management.

• Expertise in SAST, DAST, and IAST tools.

• Capability to conduct manual validation testing.

• Comprehensive knowledge of the OWASP Top 10, Mitre Top 25, and secure coding methodologies.

• Ability to evaluate complex, unclear situations and pinpoint root causes.

• Strong, clear communication skills with a proven ability to gain trust from peers.

• Enthusiasm for mentoring others.

• Familiarity with cloud security principles and compliance frameworks like SOC 2 and PCI.

🏝️ Benefits

• Competitive base salary aligned with role and experience.

• Equity opportunities available for all employees.

• Certain positions may qualify for bonuses or commissions.

• Hybrid-hub model offering either office-based or fully remote work options.

• Comprehensive benefits available through Engine’s full benefits program; perks may differ based on employment type and location.