Validity is looking for a senior application security engineer to join our security and privacy team.&nbsp; As our appsec expert, you will partner with our product development and web content teams to assess our code, applications, and sites, prioritize risks for remediation and help us shift security left in our SDLC.&nbsp; You will lead our own third-party pen tests as well as manage client-initiated assessments, and will also lend a hand in day-to-day secops and privacy team operations.&nbsp; If you are smart, autonomous, friendly, and thrive in a fast-paced environment, we’d love to have you join us!
 
Team Dynamic
 
Validity’s secops and privacy team is collaborative, cooperative, and strong business partners with all business units within Validity.&nbsp; We seek to build positive relationships while maturing and strengthening Validity’s security and privacy posture.&nbsp;
 
Position Duties and Responsibilities
 
<ul>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Provide expert-level security engineering knowledge through strong technical leadership &amp; drive demonstrable improvement to operational practices, fortifying Validity’s security posture.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Provide state of security posture &amp; recommend solutions to provide better protection of information assets.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Analyze the current security and software architecture to identify weaknesses &amp; develop opportunities for improvement.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Conduct security reviews &amp; penetration testing of systems, source code, and applications.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Provide accurate &amp; timely reporting on all project deliverables.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Provide skills training &amp; coaching for Security Operations Team members on processes, procedures, &amp; technologies.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Provide discovery, analysis &amp; forensic documentation of security incidents as they occur within the Validity systems.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Work with various IT &amp; Engineering functional groups to ensure end-to-end system security regarding data exchange between systems both internal &amp; external &amp; reduce unnecessary risk to the organization.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Research &amp; implement emerging security technologies for their application in the Validity computing environment.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Assess standard operating system configurations &amp; management practices implemented to protect Validity data.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Provide practical security best-practice guidance to Validity.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Assist in the development of disaster recovery plans and business continuity exercises.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Other duties logically associated with the position (ex:&nbsp; working with third parties on their technical assessments of our systems and applications, supporting internal customers with general security questions, etc.)</li>
</ul>
 
Required Experience, Skills, and Education
 
<ul>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">7+ years’ experience in Information Security Engineering, in a technical capacity.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Must have the ability to work effectively with all levels of staff (both technical and non-technical), possess excellent oral &amp; written communications skills, demonstrated leadership, problem-solving, planning, &amp; organizational skills.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Experience with penetration testing web-based SaaS applications and systems operating out of Cloud infrastructure (AWS, Azure, etc).</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Knowledge of application-level attacks and mitigation methods, with a thorough understanding of OWASP top 10.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Knowledge of Windows, Linux, &amp; Mac OSX operating systems, IP networking, security scanners, industry best-practices, &amp; related security topics.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Knowledge of network-based &amp; system-level attacks &amp; mitigation methods &amp; related networking hardware - routers, switches, wireless networks, load balancers, VPN, etc.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Knowledge of DAST and SAST systems.&nbsp;</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Ability to demonstrate experience in performing security design, build, implementation, &amp; support for Information Security infrastructure in an enterprise-level environment.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">CEH, eCPPT, eWPT, GWAPT, OSCP, or equivalent experience.</li>
</ul>
 
Preferred Experience, Skills, and Education
<ul>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">BS, MS in Computer Science or equivalent experience</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">CISSP, CISM, or CSSP</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Experience with Qualys and Checkmarx</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Basic knowledge of PHP, Python, and Ruby</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Experience working with compliance &amp; regulatory program requirements.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 13px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Familiarity with email marketing and/or customer relationship management (CRM) platforms are a plus.</li>
</ul>

Validity is looking for a senior application security engineer to join our
security and privacy team.  As our appsec expert, you will partner with our
product development and web content teams to assess our code, applications,
and sites, prioritize risks for remediation and help us shift security left in
our SDLC.  You will lead our own third-party pen tests as well as manage
client-initiated assessments, and will also lend a hand in day-to-day secops
and privacy team operations.  If you are smart, autonomous, friendly, and
thrive in a fast-paced environment, we’d love to have you join us!

  

**Team Dynamic**

  

Validity’s secops and privacy team is collaborative, cooperative, and strong
business partners with all business units within Validity.  We seek to build
positive relationships while maturing and strengthening Validity’s security
and privacy posture.

****  

**Position Duties and Responsibilities**

  

  * Provide expert-level security engineering knowledge through strong technical leadership & drive demonstrable improvement to operational practices, fortifying Validity’s security posture.
  * Provide state of security posture & recommend solutions to provide better protection of information assets.
  * Analyze the current security and software architecture to identify weaknesses & develop opportunities for improvement.
  * Conduct security reviews & penetration testing of systems, source code, and applications.
  * Provide accurate & timely reporting on all project deliverables.
  * Provide skills training & coaching for Security Operations Team members on processes, procedures, & technologies.
  * Provide discovery, analysis & forensic documentation of security incidents as they occur within the Validity systems.
  * Work with various IT & Engineering functional groups to ensure end-to-end system security regarding data exchange between systems both internal & external & reduce unnecessary risk to the organization.
  * Research & implement emerging security technologies for their application in the Validity computing environment.
  * Assess standard operating system configurations & management practices implemented to protect Validity data.
  * Provide practical security best-practice guidance to Validity.
  * Assist in the development of disaster recovery plans and business continuity exercises.
  * Other duties logically associated with the position (ex:  working with third parties on their technical assessments of our systems and applications, supporting internal customers with general security questions, etc.)

****  

**Required Experience, Skills, and Education**

  

  * 7+ years’ experience in Information Security Engineering, in a technical capacity.
  * Must have the ability to work effectively with all levels of staff (both technical and non-technical), possess excellent oral & written communications skills, demonstrated leadership, problem-solving, planning, & organizational skills.
  * Experience with penetration testing web-based SaaS applications and systems operating out of Cloud infrastructure (AWS, Azure, etc).
  * Knowledge of application-level attacks and mitigation methods, with a thorough understanding of OWASP top 10.
  * Knowledge of Windows, Linux, & Mac OSX operating systems, IP networking, security scanners, industry best-practices, & related security topics.
  * Knowledge of network-based & system-level attacks & mitigation methods & related networking hardware - routers, switches, wireless networks, load balancers, VPN, etc.
  * Knowledge of DAST and SAST systems. 
  * Ability to demonstrate experience in performing security design, build, implementation, & support for Information Security infrastructure in an enterprise-level environment.
  * CEH, eCPPT, eWPT, GWAPT, OSCP, or equivalent experience.

  

**Preferred Experience, Skills, and Education**

  * BS, MS in Computer Science or equivalent experience
  * CISSP, CISM, or CSSP
  * Experience with Qualys and Checkmarx
  * Basic knowledge of PHP, Python, and Ruby
  * Experience working with compliance & regulatory program requirements.
  * Familiarity with email marketing and/or customer relationship management (CRM) platforms are a plus.

