Job Description
OUR MISSION AT PERCEPTYX IS SIMPLE: We are passionate about helping organizations listen to and act on what matters most to employees. When employees are happy, everyone is happy! We love working closely with our clients, listening to their vision, and deploying a tailored solution to empower them to grow. Perceptyxs approach to employee engagement is unique. Our combination of technology and expertise is second to none. We employ an incredible staff of professionals with the experience, knowledge, and drive to move every employee survey project swiftly from vision to reality. https://perceptyx.com/
Are you passionate about Security? Then this is the role you have been waiting for. The APPLICATION SECURITY ENGINEER (ASE) will work closely with business stakeholders and other engineering team members to ensure the solutions are built per security industry-standard. The ASE will also be actively participating in the implementation processes of our systems and product.
What You Will Do:
- Review implementation code, perform manual and automated web application pen testing on critical products and features, identify security flaws, and suggest remediations.
- Research new threats, attack vectors, and risks
- Conduct threat modeling, security reviews and provide/maintain security guidance to development teams
- Help engineers design more secure applications via design input and code review
- Build tools and integrate scanners for static and dynamic analysis.
- Describe business impact of identified vulnerabilities to engineering and management
- Provide guidelines and best practices for fixing identified vulnerabilities
- Understands and writes Web Application Firewall rules to protect vulnerable applications while engineers fix identified vulnerabilities
- Provide security expertise and guidance to engineering and business teams
- Build, automate, and operate security testing capabilities
- Mentor other engineers in your areas of expertise
- Participate in scoping engagements and report delivery
REQUIREMENTS
What You Will Bring:
- Bachelors or advanced Degree in Computer Science
- Minimum of five-year experience in software design, development, scripting, and unit testing; proven experience developing large-scale database-driven applications
- 5+ years of experience in application-level vulnerability testing and code-level security reviews
- Web application pen testing and red team experience
- Strong understanding of web (OWASP Top 10) and mobile application security
- Experience performing automated testing via scripting or programming languages (Python, Golang, Shell, etc.)
- Experience conducting architecture and design reviews
- Experience with Web Application Firewalls and rules
- Experience with Qualys, Burp Suite, OWASP ZAP, or other proxying and scanner tools
- Experience communicating security issues and recommendations to both technical and non-technical audiences
- Experience investigation DDOS, SQL Injection, Cross-Site scripting, and other vulnerabilities
- Excellent technical, problem solving, and analytical skills
- Strong written and oral communication skills
- High integrity and a high level of maturity required
- Excellent organizational and leadership skills
- Excellent communication skills and ability to collaborate
- Must be very detail-oriented with a high degree of adaptability
- Willingness to work with people from diverse backgrounds and experiences
BENEFITS
What We Offer:
- Excellent Medical, Dental, and Vision benefits for you and your family
- Competitive salaries
- Flexible work schedules (before, during, AND after Covid-19)
- A team-centric, engaging work environment
Perceptyx Equal Employment Opportunity Policy:
We celebrate diversity and an inclusive environment. Perceptyx is committed to providing an environment of mutual respect where equal employment opportunities to all employees and applicants for employment. We prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Perceptyxs policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. All aspects of employment are decided on the basis of qualifications, competence, merit, and business needs. Perceptyx is proud to be an equal opportunity employer.
INTERESTED IN INTERVIEWING? Please apply by responding with your updated resume