Description:

Trace3 is seeking an experienced Application Security Professional to join their DevSecOps consulting practice.
This is a presales role where the candidate will serve as the solutions expert, supporting sales teams in prospecting and architecting application security solutions.
The role involves developing application security sales and technical training collateral for customers and internal teams.
Responsibilities include conducting research and market analysis of application security platforms and performing lab testing to validate their efficacy.
The candidate will help sales teams understand clients' business goals and technical requirements to recommend appropriate solutions.
Duties also include planning and leading the implementation of application security platforms, reviewing customer software architecture, and providing training for developers and management.
The role requires driving solution adoption across multiple development teams.

Requirements:

At least 5 years of development experience in any programming language is required.
A minimum of 8 years of combined hands-on experience as a software engineer, DevOps engineer, and/or Application Security engineer is necessary.
Previous experience as a Sales Engineer or Solutions Architect with application security software products or services is essential.
The candidate must be able to assess customer requirements and demonstrate proposed solutions.
Proficiency in programming and scripting with at least two languages such as C#, Java, Typescript, Javascript, Bash, Python, or Go is required.
Hands-on experience with various application security tools including SAST, SCA, IAST, DAST, API Security, WAF, and RASP is necessary.
Experience implementing and integrating security tools into CI/CD is required.
Familiarity with commercial application security solutions like Veracode, Checkmarx, and Snyk is essential.
Knowledge of secure software delivery based on frameworks such as OWASP SAMM, ASVS, and others is required.
Experience with Agile methodologies such as Scrum and Kanban is necessary.
Understanding of cloud-native development patterns and microservices architecture is required.
Prior experience working at an application security vendor is a bonus.

Comprehensive medical, dental, and vision plans are provided for employees and their dependents.
A 401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability are included.
Competitive compensation is offered.
Training and development programs are available to employees.
The office is stocked with snacks and beverages for employees.
A collaborative and cool office culture is promoted.
Work-life balance is emphasized with generous paid time off.