About the role
Acceldata is hiring a Security Engineer focused on SOC operations and penetration testing. You will own the security of the Acceldata platform end-to-end: finding, classifying and fixing vulnerabilities. You will work closely with Product, Sales and Engineering to build and ship secure software.
What You’ll Do • You will be part of a security team that spans proactive testing and reactive response, and you will need a working knowledge of SOC (Security Operations Centre) operations, real-time threat monitoring and response and how they complement proactive security efforts. • Run periodic penetration tests and white-box assessments to verify that security requirements have been met. Where possible, test before a product ramps. • Own end-to-end CVE management, including triage and impact analysis (confidentiality, integrity, availability). Ensure open-source dependency vulnerabilities are remediated and that monthly and quarterly patch releases carry the latest security fixes. • Partner across cross-functional teams to integrate thorough security and risk questionnaire evaluations into the sales/vendor review lifecycle. • Coordinate regular third-party application security assessments on Acceldata products. Make sure bugs are filed, fixed, and the results actioned. • Perform threat modelling and design reviews for products and features. • Build security automation for continuous validation, SAST and DAST. • Act as first responder for customer-facing security questions on CVEs, bug triage and incident management. • Partner with Product, Engineering and other teams, internal and external, to deliver secure software.
What You’ll Bring • Hands-on, production experience in penetration testing, white-box testing, application security and vulnerability management • Strong command of the OWASP Top 10, and experience finding these issues in real applications • Experience fixing security issues in Java code and Experience with API security testing • Hands-on experience with AppScan, Fortify and Checkmarx (SAST/DAST tooling) • Experience delivering secure code training to developers and bug bounty programs • Strong communication skills and a collaborative approach with the engineering team
Text as published by Acceldata. We don't edit postings; apply and ask questions on the employer's site.