Remote Senior Application Security Engineer

Description:

• theScore is seeking a Senior Application Security Engineer to join their Application Security team.
• The role involves collaborating with various teams including release and change management, SRE, Engineering, and compliance teams.
• The engineer will work with auditors to demonstrate compliance and maintain knowledge of OWASP top 10 and MITRE top 25 CWE.
• Responsibilities include developing standards for security tooling focused on the application layer, building secure artifact workflows in the SDLC, and creating technical approaches for Application Security control technologies.
• The engineer will contribute to theScore’s Application Security program, define and report on security metrics, and assist service teams in understanding and remediating security findings.
• Other duties may be assigned as required.

Requirements:

• Candidates must have 5+ years of Application Security or DevOps experience.
• A minimum of 5+ years of experience with GCP or AWS is required.
• Experience with software supply chain security, including SBOMs, Artifact Signing, and Attestations is necessary.
• Programming experience in Python or Go is essential.
• Candidates should have experience implementing security tooling in CI/CD and creating complex CI/CD workflows.
• Experience supporting RESTful APIs and securing containerized workloads (GKE, EKS) is required.
• Candidates must have experience working in regulated environments such as PCI-DSS and SOC 2.
• Experience leading technical projects to completion is necessary.
• Excellent communication skills and a history of collaboration with other teams are required.
• Optional experience includes maintaining Kubernetes clusters or managing Kubernetes deployments.

Benefits:

• theScore offers a competitive compensation package.
• Employees enjoy a fun and relaxed work environment.
• The company provides education and conference reimbursements.
• Parental leave is topped up for employees.
• There are opportunities for career progression and mentoring others within the organization.