Application Security Engineer

Summary

Data has never been more valuable and vulnerable. As cybercriminals become more sophisticated and regulations become stricter, organizations struggle to answer one key question: “Is my data safe?”

At Varonis, we see the world of cybersecurity differently. Instead of chasing threats, we believe that the most practical approach is to protect data from the inside out. We’ve building the industry’s first fully autonomous data security platform to help our customers dramatically reduce risk with minimal human effort.

At Varonis, we move fast. We’re an ultra-collaborative company with brilliant people who care deeply about the details. Together, we’re solving interesting and complex puzzles to keep the world’s data safe.

We work in a flexible, hybrid model, so you can choose the home-office balance that works best for you.

We are looking for an Application Security Engineer to join the Product Security team responsible for the overall security of Varonis’ products and services. The successful candidate will be responsible for contributing to our Cloud strategic security program.

Candidate will be reporting to Director of Product Security.

Responsibilities:

• Work to obtain the right mandate to ensure new Varonis products or services are launched with the appropriate security controls
• Provide security standards, requirements, and guidelines for securing the products
• Coordinate, participate and deliver risk assessments and threat modeling for given ew designs and architectures
• Take a part in development lifecycle and integration of security features into all phases of software design and development
• Assist with reviewing architecture and design for new products, features, and services
• Identify and facilitate remediation of application and cloud security exposures and vulnerabilities, including code reviews if needed
• Conduct cloud security strategy, readiness, and discovery assessments; be familiar with cloud security frameworks, compliance requirements, and security operations
• Research new application security tools and technologies and evaluate options that enhance security capabilities
• Work closely with different interfaces in the company, mainly R&D and Product to enhance application security on all layers
  
  

• 5+ years of experience in Application Security / Cloud Security within R&D
• Experience in Cloud technologies and SaaS environments (AWS- An advantage)
• Thorough understanding of cyber security compliance standards
• Deep knowledge in web & application security, familiar with OWASP frameworks, solutions, and initiatives
• Technical experience in network security technologies or security operations with a proven ability to engage and drive product and engineering priorities
• Great verbal and written communication skills
  
  

• CISSP, CISM, CCSP, OSCP certifications
• Technical background as an SW developer, malware reverser, or penetration testing