[Hiring] Application Security Engineer @Capgemini

Role Description

As an Application Security Engineer, your responsibilities will include:

• Security Engineering:
  • Collaborate with development teams, Site Reliability Engineering, and other stakeholders to strengthen the adoption of security best practices throughout the SDLC.
  • Independently identify security improvements and implement them.
• Vulnerability Management:
  • Implement, manage, and automate vulnerability management processes.
  • Prioritize and remediate vulnerabilities discovered through internal scans, penetration tests, and bug bounties.
• Security Assessments:
  • Conduct threat modeling, code audits, design reviews with engineers to ensure effective and secure development.
  • Collaborate in providing actionable recommendations to find workable solutions.
• Threat Hunting:
  • Establish a threat hunting capability and automate where appropriate.
  • Enhance logging capabilities related to security events.
• Security Tools Integration and Management:
  • Integrate and manage dynamic and static code analysis tools.
  • Ensure operation of security tools within the development pipeline.

Qualifications

• 4+ years experience in secure development or application security.
• Deep knowledge of security concepts such as authentication, web architecture, etc.
• Experience with Nodejs, Go, etc.
• Experience running bug-bounty, penetration testing, vulnerability scanning programs.
• Experience setting up and maintaining SAST, DAST, IAST and SCA tooling.
• Experience using assessment tools such as Burp, ZAP, Qualys, Nessus, etc.
• Experience building and maintaining WAF solutions.
• Familiarity with industry security practices, standards, and regulations such as FedRAMP, SOC2, HIPAA, etc. a plus.
• Familiarity with GCP/AWS and Kubernetes infrastructure security a plus.
• Self-motivated and goal driven, able to find what needs to be done and do it.

Requirements

• Thinking outside of the box to respectfully challenge your teammates and managers in the pursuit of excellence.
• Strong sense of urgency with an action-oriented mindset.
• Able to collaborate and adapt to shifting priorities as business needs evolve.
• Comfortable with asynchronous communication including Slack, email, Zoom, etc.

Benefits

• Health insurance from the first days, regardless of the probationary period.
• Christmas holidays from December 25 to December 31.
• Cooperation with Superhumans center and Veteran HUB, including support for psychological rehabilitation and donations for prosthetics.