Application Security Engineer

esh is looking for an Application Security Engineer to join our Cyber Security team. This is an exciting opportunity where you’ll get to impact our groundbreaking platform. You will analyze software designs and implementations from a security perspective, and identify and resolve security issues. You will include the appropriate security analysis, defenses and countermeasures at each phase of the software development lifecycle, to result in robust and reliable software. You will provide expert technical guidance and hands-on validation of secure solutions during the design, development, and testing of systems supporting the esh products.

Responsibilities

• Help plan, prioritize, and manage our Application Security roadmap.
• From within the Cyber Security team, collaborating with the Engineering teams to harden the codebase against attacks.
• Working to integrate automated vulnerability assessments into the development lifecycle, then feed the results into that same cycle frictionlessly.
• Thinking of and implementing new ways to automate and improve security across the application lifecycle.
• Being involved in the design phase of the Software Development Life Cycle, embedding security principles.
• Working with the Engineering and Product teams to scale up security by implementing a framework for security best practice, threat modeling, and input into design reviews.
• Performing code reviews across our projects in different coding languages.
• Writing and maintaining standards and other technical documentation.

Requirements

• At least 5 years of experience in application security, including the understanding of application security attacks, vulnerabilities, and mitigations- Must!
• Past experience with the primary responsibilities of this role and a history of high quality execution and ownership.
• Experience in designing and implementing new architectures and technical strategies.
• A strong understanding of security protocols, encryption, and authentication mechanisms.
• Experience with secure coding practices and familiarity with industry standards (e.g., ISO 27001, NIST) and relevant security frameworks, such as OWASP.
• Fluent written and oral English skills.

Advantage

• BS/MS in computer science or equivalent experience.
• Previous experience in setting up automated checks and controls in the development and deployment pipeline.
• Community talks, certifications, and/or blog posts on your interests and research.
• Open source project contributions of any kind, such as tools developed to solve specific problems you’ve had or fixing issues on existing projects.
• Relevant Security Certifications (e.g. CompTIA Security+, CISSP, CISM, SANS GIAC, OSCP)

Think you have the passion and inner fire for it? Bring it on and challenge us!

esh is proud to be an equal opportunity workplace. We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital state, disability or gender identity.