Acceldata is hiring a Security Engineer focused on SOC operations and penetration testing. You will own the security of the Acceldata platform end-to-end: finding, classifying and fixing vulnerabilities. You will work closely with Product, Sales and Engineering to build and ship secure software.
What You’ll Do
- You will be part of a security team that spans proactive testing and reactive response, and you will need a working knowledge of SOC (Security Operations Centre) operations, real-time threat monitoring and response and how they complement proactive security efforts.
- Run periodic penetration tests and white-box assessments to verify that security requirements have been met. Where possible, test before a product ramps.
- Own end-to-end CVE management, including triage and impact analysis (confidentiality, integrity, availability). Ensure open-source dependency vulnerabilities are remediated and that monthly and quarterly patch releases carry the latest security fixes.
- Partner across cross-functional teams to integrate thorough security and risk questionnaire evaluations into the sales/vendor review lifecycle.
- Coordinate regular third-party application security assessments on Acceldata products. Make sure bugs are filed, fixed, and the results actioned.
- Perform threat modelling and design reviews for products and features.
- Build security automation for continuous validation, SAST and DAST.
- Act as first responder for customer-facing security questions on CVEs, bug triage and incident management.
- Partner with Product, Engineering and other teams, internal and external, to deliver secure software.
What You’ll Bring
- Hands-on, production experience in penetration testing, white-box testing, application security and vulnerability management
- Strong command of the OWASP Top 10, and experience finding these issues in real applications
- Experience fixing security issues in Java code and Experience with API security testing
- Hands-on experience with AppScan, Fortify and Checkmarx (SAST/DAST tooling)
- Experience delivering secure code training to developers and bug bounty programs
- Strong communication skills and a collaborative approach with the engineering team
