Staff Application Security Engineer
FloQastAccounting Automation company
Pune, IndiaLead
ICONIQ Growth
Meritech Capital
Insight Partners
Norwest Venture Partners
Sapphire Ventures
BDT & MSD Partners
Software Engineering
About the role
TL;DR
Staff Application Security Engineer to integrate security into FloQast's product suite.
- •Join FloQast as a Staff Application Security Engineer to integrate security into our product suite and protect against modern threats.
- •Key Responsibilities Engineer, implement, and monitor security measures for computer systems, networks, and information.
- •Prepare, maintain, and document standard operating procedures and protocols.
- •Configure and troubleshoot security infrastructure systems.
- •Develop and maintain technical solutions and security tools to mitigate vulnerabilities and automate tasks.
- •Assist with security reviews, threat modeling, code reviews, and vulnerability management.
- •Requirements 8+ years of experience with auditing web applications. 3+ years using at least one high-level programming language (Node.js, Python, Go, Java, Ruby).
- •Experience with web application security scanning software and penetration testing tools (Burp Suite, ZAP, Nessus, Qualys, Metasploit, CANVAS, Nuclei, Cobalt Strike).
- •Experience conducting security training for developers and the security team.
- •Experience performing threat modeling and secure design review.
- •Experience with cloud environments (AWS or Azure).
- •Strong understanding of network and application fundamentals and best practices (HTTP, DNS, VPN, SAML, OAuth, OpenID, etc.).
- •Strong understanding of OWASP Top 10 vulnerabilities in web applications (XSS, SSRF, IDOR, RCE, CSRF).
- •Working knowledge of the Microsoft Security Development Lifecycle, OWASP Software Assurance Maturity Model, or Building Security in Maturity Model.
- •Experience implementing security practices in automated CI/CD pipelines for application code, infrastructure, and/or serverless is a plus.
- •Strong sense of ownership, urgency, and drive.
- •Strong ability to lead cross-team initiatives and communicate proposals and ideas concisely.
Required skills
OWASPPenetration TestingOAuthSAMLPythonNode.jsGoJavaRubyAWSAzureCI/CD
Domain expertise
cybersecurity
Tech stack
Node.jsPythonGoJavaRubyAWSAzureSAMLOAuthOWASPCI/CD