Sr. Product Security Engineer, Application Security (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by CrowdStrike, so some details may not match this job. The employer's own page has the real description.

Overview

The Sr. Product Security Engineer, Application Security at CrowdStrike is a critical role focused on enhancing the security posture of our applications. This position requires a proactive approach to identify, assess, and mitigate security vulnerabilities throughout the software development lifecycle. The ideal candidate will collaborate with cross-functional teams to implement security best practices, conduct security assessments, and drive secure coding initiatives. This remote position will involve staying up-to-date with the latest security trends and technologies to ensure our products remain secure against evolving threats.

Job Responsibilities

• Conduct security assessments of applications to identify vulnerabilities and security gaps.
• Develop and enforce application security policies, standards, and guidelines.
• Collaborate with development teams to integrate security practices into the software development lifecycle.
• Perform threat modeling and risk assessments for new and existing applications.
• Provide security training and awareness programs for development and operational teams.
• Respond to and remediate any identified security incidents related to applications.
• Stay updated with emerging security threats and vulnerabilities relevant to application security.
• Assist in the creation of security architecture and designs that incorporate best practices.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field; advanced degree preferred.
• A minimum of 5 years of experience in application security, software development, or a related area.
• Strong understanding of secure coding practices and OWASP Top 10 vulnerabilities.
• Experience with static and dynamic application security testing tools.
• Proficient in programming languages such as Python, Java, or JavaScript.
• Knowledge of cloud security practices and architectures.
• Relevant security certifications (e.g., CISSP, CEH, CSAP, etc.) are a plus.
• Excellent problem-solving and analytical skills with a keen attention to detail.

Technologies & Tools

The Sr. Product Security Engineer will engage with a variety of technologies and tools, including security analysis and testing software such as SAST, DAST, and penetration testing frameworks. Familiarity with tools such as Fortify, Burp Suite, and Static Code Analysis tools will enhance the capability to perform comprehensive assessments. Additionally, knowledge of containerization and cloud platforms such as AWS and Azure will be beneficial for integrating security solutions in various environments.

Ideal Candidates

An ideal candidate for this position is one who possesses a proactive mindset with a strong passion for security. They should demonstrate effective communication skills, enabling them to convey complex security concepts clearly to technical and non-technical stakeholders alike. A collaborative spirit is crucial, as the role requires working closely with development teams. Furthermore, the candidate should exhibit curiosity and a continuous willingness to learn and adapt to the ever-changing landscape of application security threats and mitigation strategies.