Security Assessment

Manage security tools(Snyk, Fossa, Trivy).

Manage vulnerability programs. Triage vulnerabilities, assign priorities and owners, follow up on the mitigation

Monitor license violations.

Perform Security Assessments and Threat Modeling

Security Incident Response. Be part of a security-on-call team in PagerDuty, act as incident commander, perform Root Cause Analysis.

Drive security initiatives(Web Application Security, Least-privilege principle, Secrets Management, Key Management, PKI and Certificate Management, Anti-fraud protection).

Given our fast pace and startup nature, things change over time and your job responsibilities will too.

You'll need:

Web application security experience.

Familiarity with a modern SaaS infrastructure and application development.

Manual and/or automated Penetration Testing (white box, black box & grey box).

Good understanding of security risk(OWASP Top 10).

Pen-testing: burp suite/ postman, etc.

Vulnerability management: Snyk, fossa, NexusIQ, WhiteHat security, aqua security, GitHub security, etc.

Familiarity with major security protocols.

Collaboration, transparency, and integrity.

BS/MS degree; 5+ years of relevant experience.

Nice to have:

Experience in scripting languages(BASH, Python, JS, etc).

CEH, CSSLP, GIAC, OSCP, OSCE, or other related industry-recognized certifications.