Remote Senior Application Security Engineer-I

Description:

• The Senior Application Security Engineer-I role can be performed remotely from anywhere in India.
• Application Security SREs at Sumo Logic collaborate with development teams and the Security Operations Center (SOC) to ensure product security and compliance.
• Responsibilities include ensuring secure application development by applying secure coding best practices and creating training materials.
• The role involves performing security reviews and penetration tests during design and implementation stages, proposing solutions for any identified security deficiencies.
• The engineer will lead threat modeling exercises to evaluate technical designs.
• The position requires leveraging Sumo’s products and third-party tools to enhance security within the software development lifecycle.
• The engineer will integrate and implement solutions to improve Sumo Logic's security posture.
• Participation in security research, investigations, platform hardening, and audits is expected.
• The role includes driving continual improvement and operational excellence for security tools.
• On-call participation is required to provide coverage for security and platform components.

Requirements:

• A B.S. or M.S. in Computer Sciences or a related discipline is required.
• A passion for security is essential, with an understanding of software security vulnerabilities and best practices to defend against attackers.
• An operations mindset is necessary, with knowledge of leveraging encryption, key management, monitoring, alerting, and automation for security at scale.
• Candidates should have 4-6 years of professional experience in applied software security roles.
• Strong knowledge of OWASP top 10 security vulnerabilities, with the ability to identify security flaws, assess their impact, and propose solutions for developers is required.
• Experience with cloud security tools as part of software architecture is necessary.
• Operational expertise in high-scale, reliable 24/7, multi-tenant SaaS environments is required.
• Strong coding and debugging skills are essential, with Scala experience being highly beneficial.
• Security certifications, experience in bug bounty/CTFs, reported CVEs, and familiarity with compliance frameworks and audits are considered pluses.

Benefits:

• Employees will have the opportunity to work remotely from anywhere in India.
• Sumo Logic provides a collaborative environment where engineers can partner with development teams and SOC to enhance security.
• The role offers the chance to work with cutting-edge technology and tools in the field of application security.
• Employees will gain experience in a fast-paced SaaS environment, contributing to the security posture of a leading analytics platform.
• Sumo Logic is committed to employee development and offers opportunities for continual learning and improvement in security practices.