Product Security Engineer, Application Security (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by CrowdStrike, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Product Security Engineer, Application Security at CrowdStrike will play a critical role in enhancing our product security posture and protecting our applications from threats. This position involves collaborating with cross-functional teams to integrate security practices within the software development lifecycle, conducting assessments, and identifying vulnerabilities in applications and systems. The engineer will be responsible for implementing security controls, providing guidance on secure coding practices, and ensuring adherence to security standards, all while fostering a culture of security awareness within the organization.

Job Responsibilities

• Conduct security assessments and vulnerability scans to identify security weaknesses in applications and systems.
• Collaborate with development teams to integrate security into the software development lifecycle (SDLC).
• Provide guidance on secure coding practices and threat modeling to mitigate risks.
• Review and analyze code for security vulnerabilities and recommend corrective actions.
• Develop and deliver training and awareness programs for development teams on security best practices.
• Utilize various security tools to monitor and improve application security continuously.
• Stay updated on the latest security threats and emerging technologies to enhance security strategies.
• Participate in incident response activities and provide technical assistance during security incidents.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 3+ years of experience in application security or a related field.
• Strong understanding of application security frameworks, tools, and best practices.
• Proficient in programming languages such as Python, Java, or C#.
• Experience with security tools such as static/dynamic analysis tools, web application firewalls, and vulnerability assessment tools.
• Knowledge of secure coding practices and software development methodologies.
• Certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or similar are a plus.

Technologies & Tools

The Product Security Engineer will leverage a variety of technologies and tools including but not limited to static and dynamic application security testing (SAST and DAST) tools, security information and event management (SIEM) systems, and web application firewalls (WAF). Familiarity with cloud security practices and tools will be essential, as well as a strong understanding of modern software development frameworks and programming languages.

Ideal Candidates

Ideal candidates for the Product Security Engineer position will possess strong analytical and problem-solving skills, with a keen ability to think critically in high-pressure situations. They should exhibit excellent communication skills and be able to work collaboratively across teams to promote security awareness. A proactive mindset and a passion for security are essential, as is the adaptability to an ever-evolving threat landscape. Candidates should demonstrate a commitment to continuous learning and staying informed about the latest cybersecurity trends and technologies.