Senior Security Engineer - Application Security
כדי להגיש, לשמור או לפתוח את דף המשרה מתחברים עם Google. זה חינם, ואחרי ההתחברות חוזרים ישר למשרה הזו.
תקציר
This is an opportunity to join K's critical InfoSec team as a Senior Security Engineer - AppSec and operate with foresight in protecting our infrastructure, applications, cloud security, and customer trust.
דרישות
- 4+ years of professional experience in application, product or software security, operating as an individual contributor, OR as a software engineer that has pivoted into security
- Strong understanding of application security vulnerabilities and attach techniques, including OWASP Top 10 and API security risks
- Experience performing manual security testing of modern web applications, APIs and distributed systems
- Ability to review application architecture and source code for security weaknesses
- Experience integrating application security tools into modern CI/CD workflows
- Familiarity with static application security testing, dynamic testing, secrets detection, container security and infrastructure-as-code scanning
- Understanding of authentication, authorization, session management, cryptography, secrets management and secure API design
- Strong expertise in cloud technology (AWS, GCP, or Azure), modern programming languages, utilization of generative coding utilities, and the security implications of utilizing AI code development utilities.
- Demonstrated experience researching, establishing, and successfully rolling out enterprise-wide security policies and guidelines.
- Exploring, partnering and implementing bleeding edge tech not readily available to others. (advantage)
- Experience with specific tools and tech K uses including but not limited to: Datadog, Sumologic, Torq, flare.io , GCP, Entitle, Okta, Orca, GitLab, Prisma Access Browser (advantage)