Senior Security Engineer

About us:

HappyFox is a software-as-a-service (SaaS) support platform. We offer an enterprise-grade help desk ticketing system and intuitively designed live chat software.

We serve over 12,000 companies in 70+ countries. HappyFox is used by companies that span across education, media, e-commerce, retail, information technology, manufacturing, non-profit, government and many other verticals that have an internal or external support function.

To know more, Visit! - [hidden]

Responsibilities:

Perform manual and automated application penetration tests and provide suggestions to harden our products

Participate regularly in the development and release process to identify and report security vulnerabilities in the code being shipped

Conduct regular audits on all Features/APIs of the product and reports vulnerabilities to the development team

Keep up with industry trends in the security space

Triage inbound vulnerability reports with an appropriate level of urgency and track them until they are resolved by Engineering teams

Should be able to understand different elements of our NodeJS, Python and similar stacks and provide guidance on secure software development practices to the team

Scale our application security engineering team

Requirements:

Strong verbal and written communication skills

Has worked on Web Application Security Testing for a reasonably complex application. The mobile experience is a plus

Good knowledge of secure software development guidelines from authoritative bodies like NIST, OWASP, SANS

Hands-on experience in performing manual/automated security assessments with open-source/commercial security tools