Contrast Security named to Inc.'s “Best Workplaces of 2020” Contrast Security is the world’s leading provider of security technology that enables software applications to protect themselves against cyberattacks, heralding the new era of self-protecting software. Contrast's patented deep security instrumentation is the breakthrough technology that enables highly accurate assessment and always-on protection of an entire application portfolio, without disruptive scanning or expensive security experts. Only Contrast has sensors that work actively inside applications to uncover vulnerabilities, prevent data breaches, and secure the entire enterprise from development, to operations, to production. About the Position Our Application Security Engineering team is hyper-focused on continuous security enhancements in all aspects of the Software Development Lifecycle for a wide range of Contrast Security products. The team focuses on knowing our product, protecting our environments, and securing our software. The applicant will be responsible for taking ownership of security initiatives, such as defining security requirements and policies, reviewing testing and deployment standards, and asset and vulnerability management. Additionally, he or she will have the freedom to contribute their unique perspectives and ideas on our product security processes.
Responsibilities
- Developing, building, and supporting DevSecOps tools for our SDLC processes
- Partner with engineering department for Secure Architecture Code Reviews and defining security requirements
- Maintain a complete internal security picture through asset and vulnerability management
- Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks
- Ability to perform vulnerability and penetration assessments
About You
- Experience with application security, development, and vulnerability management reporting
- Programming abilities in Python, C or Java (plus if you have experience with NodeJS, Ruby and/or GoLang)
- You can take general direction and work independently to solve problems
- You have strong communication skills
- You ask questions, let others know when you need help, and tell others what you need
- 1-3 years experience of industry security engineering
- Experience with threat modeling and attack forensics
What We Offer
- Competitive compensation
- Daily in-office team lunches (when offices are open)
- Meaningful stock plans
- Medical, dental, and vision benefits
- Flexible paid time off