We're looking for problem solvers, innovators, and dreamers who are searching for anything but business as usual. Like us, you're a high performer who's an expert at your craft, constantly challenging the status quo. You value inclusivity and want to join a culture that empowers you to show up as your authentic self. You know that success hinges on commitment, that our differences make us stronger, and that the finish line is always sweeter when the whole team crosses together.
Job Title: Senior Software Security Engineer
Job Description:
We're looking for problem solvers, innovators, and dreamers who are searching for anything but business as usual. Like us, you're a high performer who's an expert at your craft, constantly challenging the status quo. You value inclusivity and want to join a culture that empowers you to show up as your authentic self. You know that success hinges on commitment, that our differences make us stronger, and that the finish line is always sweeter when the whole team crosses together.
Want more jobs like this?
Get Software Engineering jobs in Bangalore, India delivered to your inbox every week.
Overview:
As Senior Software Security Engineer you will advocate for security to be built into the product at each stage of the SDLC. You will work with software engineers, security teams, and product management to provide technical advice to ensure secure implementation of software products.
Primary Responsibilities:
- Enhance security touch points throughout the SDLC with emphasis on code review and verification
- Perform secure design reviews, identify security gaps and propose mitigations
- Provide security subject matter expertise following best practices, standards, and policies across areas such as identity and access management, cryptography, web security, cloud security, and more
- Participate in investigation and remediation of vulnerabilities affecting software products
- Identify security gaps and work with partner teams to implement robust security controls
- Assist software engineers with understanding security tool findings and mitigations
- Partner with Software Architecture and DevOps for ensuring security best practices in the ideation phases
Requirements:
- Minimum 5+ years of proven experience successfully delivering secure software throughout a Software Development Lifecycle
- Strong knowledge of software vulnerabilities, mitigations, threat modeling, risk assessment, and vulnerability management
- Experience in a programming language such as Modern C++, C#, Rust, Golang, Java, or Scala
- Able to discuss and provide clear technical guidance on cryptographic concepts like cryptography, hashing, encoding, key management, etc.
- As a security advocate you will take the initiative to collaborate with stakeholders across the organization, including software engineering teams and product owners, to provide pragmatic security solutions
- Adaptable at explaining security concepts to stakeholders of various backgrounds
- Understanding of how to diagnose software build and scan results, such as CI/CD, SAST, DAST, SCA, and Container scans
- Able to balance various stakeholder concerns with security requirements
- Bachelor's degree and/or equivalent experience in computer science, information technology, or related field
Desirable:
- Extensive experience writing and code reviewing Modern C++ codebases
- Strong experience with SaaS applications and Cloud technology such as GCP, AWS, Docker/Containers, Kubernetes, and microservice architectures
- Experience developing or maintaining CI/CD and scanning systems (e.g. can implement and maintain a system that helps find vulnerabilities)
- Experienced in software security testing (SAST, DAST, SCA, Manual Penetration Testing and Vulnerability Management)
- Demonstrable practical experience integrating and maintaining cryptographic systems/libraries into software projects, such as OpenSSL, NaCl, argon2, or bcrypt
- Strong knowledge of software design patterns and security analysis
Find yourself checking a lot of these boxes but doubting whether you should apply? At Alteryx, we support a growth mindset for our associates through all stages of their careers. If you meet some of the requirements and you share our values, we encourage you to apply. As part of our ongoing commitment to a diverse, equitable, and inclusive workplace, we're invested in building teams with a wide variety of backgrounds, identities, and experiences.