Application Security Engineer

ControlUp is the market leader in the IT platform for Monitoring, Self-healing and Analyzing customers’ virtual environments, creating solutions that save IT organizations time, money, and stress.

We are looking for an Application Security Engineer to join our Cyber Security team. The Application Security Engineer will deal with the efforts to secure ControlUp products and infrastructure by guiding the R&D and Product teams and by performing code reviews and penetration tests.

What you will do:

• Perform white-box application and infrastructure penetration tests
• Perform Threat modeling, Design reviews and Code reviews
• Work closely with development, devops and product teams to ensure vulnerabilities are avoided at an early stage.
• Programming specially crafted tools and automations to hunt for vulnerabilities
• Advice and answer questions to different “hacking” related questions.
• Review and prioritize findings of code scanning tools (SAST, SCA etc.)
• Answer on technical questions which raised by customers

What you will need:

• 4+ years of experience in offensive application security
• In-depth knowledge of web application vulnerabilities, their exploitation in the real world, and browser security mechanisms.
• Proficient with writing and reading code (preferably in a product level - not scripts) of at least one of the following - Nodejs, .NET, Python
• Familiar with cloud and cloud native technologies and their attack surface (AWS, Azure, Kubernetes)
• Advantages:
• Information security certificates such as OSWE, OSCP
• Experience with penetration testing of agent based desktop applications.
• Experience with Red team activities (Cloud & Windows environment)
• Published security research \ CVEs.