Staff Product Security Engineer (Native Applications)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Code Red Partners, so some details may not match this job. The employer's own page has the real description.

Job Overview

As a Staff Product Security Engineer (Native Applications) at Code Red Partners, you will play a pivotal role in safeguarding the security of our native application offerings. You will be responsible for applying your deep technical expertise to design, implement, and maintain security measures that protect our products from vulnerabilities and threats. Collaborating with cross-functional teams, you will ensure that security is integrated into the product development lifecycle while conducting security assessments, code reviews, and penetration testing. Your contributions will be instrumental in achieving our mission to deliver secure and reliable applications to our customers.

Job Responsibilities

• Lead security assessments for native applications, identifying vulnerabilities and recommending remediations.
• Collaborate with engineering teams to integrate security practices throughout the software development lifecycle.
• Conduct code reviews and perform static and dynamic analysis on both new and existing applications.
• Develop and maintain security guidelines, best practices, and training materials for developers.
• Implement and oversee application security testing tools to ensure comprehensive coverage.
• Respond to security incidents and drive the resolution process in a timely manner.
• Stay updated on the latest security trends, threats, and technologies to continuously enhance our security posture.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field; Master's degree preferred.
• A minimum of 5 years of experience in application security, with a focus on native applications (iOS/Android).
• Strong understanding of secure coding practices for mobile platforms and familiarity with OWASP Top 10.
• Experience with security assessment tools and methodologies, including static code analysis and penetration testing.
• Proficiency in programming languages such as Java, Swift, Kotlin, or Objective-C.
• Excellent problem-solving skills and the ability to communicate complex security concepts to technical and non-technical stakeholders.
• Relevant security certifications, such as CISSP, CEH, or OSCP, are a plus.

Technologies & Tools

The Staff Product Security Engineer will work with a range of technologies and tools, including but not limited to security testing tools such as Burp Suite, Checkmarx, and OWASP ZAP, as well as programming frameworks for native applications like React Native, Swift, and Android SDK. Additionally, familiarity with CI/CD pipelines integral to DevSecOps practices is essential for ensuring security measures are embedded throughout the deployment process.

Ideal Candidates

Ideal candidates for the Staff Product Security Engineer position will possess a strong analytical mindset, exceptional attention to detail, and the ability to work collaboratively within multidisciplinary teams. They should demonstrate a proactive approach to security challenges and embody a commitment to continuous learning and improvement in the evolving threat landscape. Strong communication skills and the ability to mentor and guide less experienced team members are also essential qualities that a successful candidate should exhibit.