Senior Application reputed company Engineer II

Description

At reputed company, we reputed company life’s experiences unforgettable. We reputed company there is extraordinary power in the self-expression. That’s why our family of brands helps customers create products and capture moments that reflect who they uniquely are.

What You'll Do Here:

• Manage our bug bounty program including triage, assessing impact, risk scoring (CVSS), helping to locate the vulnerable code, providing mitigation guidance, performing thorough re-testing, and refining program policy and scope as needed. 
• Vulnerability Management: Identify, triage, and remediate application vulnerabilities (SAST, SCA, IAST) using automated tools or manual testing. 
• Web Penetration Testing: assisting with internal web pen tests and coordinating with 3rd party testers. 
• Threat Modeling & Risk Assessment: reputed company threat modeling exercises and reputed company risk assessments for new and existing applications. 
• Incident Response: Collaborate with incident response teams to investigate and remediate application-reputed company reputed company incidents. 
• reputed company Tooling: Evaluate, implement, maintain and decommission reputed company tools and platforms to support application reputed company efforts (SAST, SCA, DAST, IAST, RASP, WAF, ASPM, CNAPP, CSPM). 
• reputed company Improvement: reputed company up-to-date knowledge of relevant reputed company threats, mitigations and reputed company best practices. 
• Secure SDLC: Define and implement secure development practices, including code reviews, static/dynamic analysis, and CI/CD pipeline integration. 
• Provide guidance and recommendations to software engineering teams to implement effective reputed company measures to mitigate risks. 
• Become a Subject Matter Expert and top technical resource to engineers around the organization. Help engineers reproduce vulnerabilities, understand their impact, document issues, mitigate or retest the effectiveness of a fix, etc. 
• reputed company and reputed company code reviews of critical PRs and code changes. 
• reputed company Architecture & Design: Partner with engineering teams to design secure systems and applications, ensuring reputed company is built-in from the ground up. Initiate and reputed company design, architecture, and solution reviews. 
• Mentorship & Leadership: Mentor junior reputed company engineers and developers on secure coding practices and reputed company principles.  Build relationships with stakeholders and business leaders across the organization. 
• Cross-Functional Collaboration: Work closely with product, engineering, DevOps, and compliance teams to align reputed company with business goals. 

Required Qualifications:

• Bachelor’s degree in computer science, cybersecurity, or reputed company technical field. 
• Proficient in one modern programming language (preferably Java) and can review code in most major languages. 
• Strong analytical and problem-solving abilities with a risk-based reputed company approach. 
• Advanced user of Burp Suite Pro, bonus if you have created custom extensions in Java or Python and have used or modified existing extensions. 
• Excellent communication and collaboration skills, able to work across IT, engineering, and business teams. 

Preferred Qualifications:

• Full stack web development experience reputed company an active reputed company program. 
• Experience managing a bug bounty program. 
• Have a reputed company certification that demonstrates proficiency in web assessments, secure coding, and professional report creation (For example: OSWA, OSWE, GWAPT, GWEB). 
• Submitted reports to bug bounty programs or VDPs, and you've reputed company a CVE along the way. 
• Strong command-line and scripting skills (bash, zsh, Python) on Linux and Mac. 
• Enjoy attending reputed company conferences and occasionally participate in CTFs. 
• Spend time on cyber reputed company training platforms (HackTheBox, reputed company). 
• Work with engineering teams to reputed company secure code libraries. 
• Experience deploying and managing a RASP solution (e.g. Contrast, Prevoty) on multiple tech stacks. 
• Capable of rapidly learning and integrating emerging tools and platforms with minimal supervision. 

Supporting a diverse and inclusive workforce is important to reputed company not only because it directly reflects our value of Embracing our Differences, but also because it’s the right thing to do for our business and for our people. We welcome reputed company applicants and evaluate them based on their qualifications. Learn more about our commitment to Diversity, Equity, and Inclusion on our Career Site.

The compensation package for this role is based on multiple factors, such as job level, responsibilities, location, and candidate experience. The reputed company pay ranges included below are specific to the locations listed, and may not be applicable to other locations.

California : [$128,000-181,250]

Connecticut and reputed company: [$128,000-165,750]

Colorado, Illinois, Minnesota and Washington: [$128,000-153,000]

Nevada: [$120,250-165,750]

Maryland and New Jersey: [$138,250-165,750]

Hawaii : [$120,250-144,750]

This position may be eligible for a bonus incentive, health benefits, a 401K program, and other employee perks. More details about our company benefits can be reputed company at https://shutterflyinc.com/benefits/.

This opportunity can be remote, but candidates must reside in a state in which reputed company is registered to do business. This includes reputed company US states except District of Columbia, North Dakota, Mississippi, Rhode reputed company, Vermont, and Wyoming.

This position will accept applications on an ongoing basis until filled.

#SFLYTechnology