Product Security Engineer, Senior

Position Overview

As part of the Security team, the Senior Product Security Engineer will support and advance the security of TraceLink’s applications. Working closely with Product, Cloud Operations, Services, and others in the Security team, this role will focus on driving increased maturity of security-related processes throughout the SDLC. This individual will serve as a Security Subject Matter Expert for priority products, conducting security assessments (hacking), developing automation, improving processes, managing vulnerabilities discovered by tooling, maintaining automated tooling, and developing and delivering training. Responsibilities

●     Provide guidance to teams on security best practices throughout the SDLC

●     Join in regular security assessments of our products
●     Continually drive further maturity across TraceLink processes
●     Support efforts to address identifies security issues
●     Assist with maintaining, operating, and optimizing security testing tools such as SAST, SCA, and DAST
●     Maintain a high level of expertise the application security landscape and new threat vectors
●     Develop and support the security needs of TraceLink’s partner program and Qualifications

●   8 years experience with securing cloud-native applications
●    4 years experience with the application of threat modeling or other risk identification techniques[DN1]
●     Strong knowledge of Application Security testing tools
●     Expert knowledge of OWASP Top 10, including avoidance and remediation techniques
●     Experience in remediating complex enterprise-level security issues
●     Experience working with Agile/Scrum development methodology
●     Experience automating tasks and analysis
●     Strong analytical and problem solving skills
●     Strong verbal and written communication skills
●     Knowledge of microservices architecture and supporting technologies
●     Bachelor’s degree or equivalent experience in Computer Science, Information Systems Security, or related field
●     CISSP, CCSP, CEH, CSSLP, CKS, AWS Security, OffSec, SANS Security, and other industry and vendor-specific security certifications.