Application Security Engineer

DescriptionFiverr is looking for an Application Security Engineer to join our Cybersecurity team.As an Application Security Engineer, You will implement and maintain Fiverr’s application security programs side-by-side with our talented security team, developers, product managers and platform teams.You will also contribute to other security domains and initiatives such as Security Operations, Incident Response, Monitoring and Risk Management.Our work model is hybrid, combining remote and on-site work. This allows us to get things done when and where we are most productive.WHAT AM I GOING TO DO?

• Ensure the implementation of Security and Privacy By Design as well as SSDLC concepts across all features and products
• Promote a culture of security across the organization
• Help design and implement threat modeling process
• Lead and promote security audits, vulnerability assessments, penetration tests, and code reviews for Fiverr’s features and services
• Manage Fiverr’s Bug Bounty program
• Train and educate Fiverr’s dev teams about secure coding
• Build and implement best-in-class application security solutions
• Maintain existing security tools and systems
• Participate in application security incidents and investigations

Requirements

• Share the passion for application security
• 2+ years of application security hands-on experience
• Mandatory: Full control of the OWASP Top 10 application security risks and how to address them
• Mandatory: Good understanding of encryption types, authentication, authorization, session management, key management, etc.
• Experience with SAST, DAST, SCA, and penetration testing tools
• Excellent understanding of core security networking concepts like TLS, SSH, DNS, WAF, etc
• Good understanding of microservice architecture, Kubernetes, docker, linux web technologies, and APIs
• Good presentation skills: Ability to articulate technically advanced issues to all audiences; Ability to mentor and train internal staff
• Self-driven, “A” player, and a team player
• Strong organizational skills and excellent attention to details
• Ability to effectively prioritize and execute tasks
• Excellent English

At Fiverr, we’re not about checklists. If you don’t meet 100% of the requirements for this role but still feel passionate about the position and think you have the right skills and qualifications to excel at it, we want to hear from you.EQUAL OPPORTUNITIESAt Fiverr, we prioritize diversity. We celebrate difference and embed it into every aspect of our workplace and product, as well as our community. Fiverr is proud and committed to providing equal opportunity employment to all individuals regardless of race, color, religion, sex, sexual orientation, citizenship, national origin, disability, Veteran status, or any other characteristic protected by law. In addition, Fiverr will provide accommodation to individuals with disabilities or a special need.