Application Security Engineer II

Location: Mexico

Ellucian powers innovation for higher education, partnering with approximately 3,000 customers across 50 countries, serving more than 21 million students. Ellucian's AI-powered platform, trained on the richest dataset available in higher education, drives efficiency, personalized experiences, and strengthened engagement for all students, faculty and staff. Fueled by decades of experience with a singular focus on the unique needs of learning institutions, the Ellucian platform features best-in-class SaaS capabilities and delivers insights needed now and into the future. These solutions and services span the entire student lifecycle, including data-rich tools for student recruitment, enrollment, and retention to workforce analytics, fundraising, and alumni engagement. Ellucian's innovative solutions, vast ecosystem of partners and user community of more than 45,000 provides best practices leading to greater institutional success and achieving better student outcomes.

Ellucian designs technology that powers the educational mission of colleges and universities around the world. Inspired by that goal, Ellucian employees thrive as part of a high-performing global team committed to delivering a modern, connected, industry-leading experience for today’s students and higher education institutions. More than 2,500 institutions in 50 countries around the world look to Ellucian for the ideas and insights that will move education forward, helping people everywhere discover their futures through learning. The individual in this position will be a contributor to DevSecOps and overall application security initiatives in Ellucian

Where You Will Make an Impact

• Analyze the security of Ellucian applications and coding practices using a variety of tools and frameworks.
• Perform manual and automated application penetration testing.
• Provide guidance to development teams for remediating application security vulnerabilities.
• Develop innovative new DevSecOps solutions to application security problems.
• Act as an evangelist for DevSecOps and application security within Ellucian.
• Create and deliver application security training for product owners, business analysts, test engineers and developers.
• Lead ongoing process and policy improvement efforts.
• Provide mentoring to members of development teams.
• Conduct ongoing research of trends in application security practices, tools and utilities

What You Will Bring

• A strong passion for application security.
• 2 to 5 years of experience working as Application Security engineer or similar position.
• Thorough knowledge of SAST, DAST, SCA tooling.
• Extensive skills and experience performing application security / penetration testing using manual and automated tools including AI.
• Progressive application security and software development experience.
• Demonstrated technical skills, especially in the areas of enterprise application security, AI security testing, and secure development practices.
• A thorough understanding of OWASP application security tools, code libraries and documentation.
• Experience developing automated solutions to application security problems.
• Demonstrated ability to clearly communicate complex ideas verbally and in writing.
• Excellent troubleshooting, problem-solving, and analytical skills.
• Ability to occasionally work off-hours or extended hours in support of various projects.

Desired Skills/Knowledge/Experience:

• Preferable experience of 2-5 years in performing manual and tool driven penetration testing for web apps, APIs.
• Knowledge or experience of DevOps tooling such as Jenkins is a plus.
• Understanding of WAF, IAST & RASP.
• Understanding of containers, virtualization and orchestration tools.
• Experience securing Cloud applications in AWS.
• Application security certification such as CSSLP, GIAC GWAPT or similar.
• Experience remediating application vulnerabilities.
• AWS knowledge and/or certifications is an advantage.

• Comprehensive health coverage: family major medical expenses, dental and life insurance.
• Christmas bonus 30 days
• Saving fund
• Monthly food coupon
• 15 workdays vacation
• Thrive Flex Program that allows you to contribute towards your health, financial or learning interests
• 5 charitable days to support the community that supports us
• Diversity and inclusion programs that promote employee resource groups such as: Women in Technology, Pride and Go Green to name a few.
• Parental leave
• Employee referral bonuses to encourage the addition of great new people to the team
• We Foster a learning culture with:
  • Tuition Reimbursement Assistance 
  • Professional development opportunities
  • LinkedIn Learning

#LI-RB1 

#LI-Remote

Responsibilities

Ellucian designs technology that powers the educational mission of colleges and universities around the world. Inspired by that goal, Ellucian employees thrive as part of a high-performing global team committed to delivering a modern, connected, industry-leading experience for today’s students and higher education institutions. More than 2,500 institutions in 50 countries around the world look to Ellucian for the ideas and insights that will move education forward, helping people everywhere discover their futures through learning. The individual in this position will be a contributor to DevSecOps and overall application security initiatives in Ellucian

Where You Will Make an Impact

• Analyze the security of Ellucian applications and coding practices using a variety of tools and frameworks.
• Perform manual and automated application penetration testing.
• Provide guidance to development teams for remediating application security vulnerabilities.
• Develop innovative new DevSecOps solutions to application security problems.
• Act as an evangelist for DevSecOps and application security within Ellucian.
• Create and deliver application security training for product owners, business analysts, test engineers and developers.
• Lead ongoing process and policy improvement efforts.
• Provide mentoring to members of development teams.
• Conduct ongoing research of trends in application security practices, tools and utilities

What You Will Bring

• A strong passion for application security.
• 2 to 5 years of experience working as Application Security engineer or similar position.
• Thorough knowledge of SAST, DAST, SCA tooling.
• Extensive skills and experience performing application security / penetration testing using manual and automated tools including AI.
• Progressive application security and software development experience.
• Demonstrated technical skills, especially in the areas of enterprise application security, AI security testing, and secure development practices.
• A thorough understanding of OWASP application security tools, code libraries and documentation.
• Experience developing automated solutions to application security problems.
• Demonstrated ability to clearly communicate complex ideas verbally and in writing.
• Excellent troubleshooting, problem-solving, and analytical skills.
• Ability to occasionally work off-hours or extended hours in support of various projects.

Desired Skills/Knowledge/Experience:

• Preferable experience of 2-5 years in performing manual and tool driven penetration testing for web apps, APIs.
• Knowledge or experience of DevOps tooling such as Jenkins is a plus.
• Understanding of WAF, IAST & RASP.
• Understanding of containers, virtualization and orchestration tools.
• Experience securing Cloud applications in AWS.
• Application security certification such as CSSLP, GIAC GWAPT or similar.
• Experience remediating application vulnerabilities.
• AWS knowledge and/or certifications is an advantage.

Qualifications

• Comprehensive health coverage: family major medical expenses, dental and life insurance.
• Christmas bonus 30 days
• Saving fund
• Monthly food coupon
• 15 workdays vacation
• Thrive Flex Program that allows you to contribute towards your health, financial or learning interests
• 5 charitable days to support the community that supports us
• Diversity and inclusion programs that promote employee resource groups such as: Women in Technology, Pride and Go Green to name a few.
• Parental leave
• Employee referral bonuses to encourage the addition of great new people to the team
• We Foster a learning culture with:
  • Tuition Reimbursement Assistance 
  • Professional development opportunities
  • LinkedIn Learning

#LI-RB1 

#LI-Remote