Trace3

Who is Trace3?
Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.
Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!
Trace3 is headquartered in Irvine, California. We employ more than 1000 people all over the United States. Our major field office locations include Atlanta, Denver, Detroit, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, San Diego, San Francisco, and Scottsdale.  
Ready to discover the possibilities that live in technology?

Come Join Us!
Street-Smart - Thriving in Dynamic Times
We are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.
Juice - The “Stuff” it takes to be a Needle Mover 
We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.
Teamwork - Humble, Hungry and Smart
We are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures – not just their success. We appreciate the individuality of the people around us.

About the Role:
Trace3 is looking for an experienced Application Security Professional to join our fast-growing DevSecOps consulting practice to help our customers in evaluating and implementing application security solutions.  This is a hybrid role where you will be spending some of your time in a presales capacity as the hands on solutions expert to support our sales teams to prospect, influence, architect, and scope application security solutions to our customers.  You will help develop application security sales and technical training collaterals for customers and our internal sales teams.  You will conduct research and market analysis of leading application security solution platforms as well as lab testing them to validate coverage and evaluate efficacy.  You will also assist our sales teams to understand client’s business goals and technical requirements to rationalize the appropriate application security solutions for their use cases. 

You will also spend time being responsible for delivering application security services and advise our customers on secure software development.  This includes planning and leading the implementation and adoption of application security platform solutions, reviewing customer software architecture and source code, provide training for developers and management, and drive solutions adoption across multiple development teams. 
What You’ll Do:
<ul>
<li>Lead presales engagements as the Application Security subject matter expert to Trace3 customers and sales teams nationally</li>
<li>Work closely with our sales teams throughout the sales process to ensure all the client’s technical needs are understood and met with the best possible solution options</li>
<li>Drive technical relationships with all stakeholders and support sales opportunities</li>
<li>Present at client facing and industry events as the SME in application security</li>
<li>Conduct research analysis and lab testing of application security solutions to evaluate efficacy, use cases coverage, and fit-for-purpose</li>
<li>Build and maintain application security vendor partner relationships</li>
<li>Contribute to the development of both customer facing and internal facing presales collaterals</li>
<li>Contribute to the development of service offering collaterals and service delivery documentations that we can take to market with selected application security solutions</li>
<li>Champion Agile and DevOps leading-practices, processes, design patterns, and tools in support of DevSecOps transformation</li>
<li>Assist in services opportunity generation, technical scoping, and Statements of Work (SOW) writing</li>
<li>Assist in the delivery of application security services</li>
<li>Promote DevSecOps culture to our customers</li>
<li>Drive adoption of application security tools and DevSecOps practices as part of customer’s transformation</li>
</ul>
Qualifications &amp; Interests:
<ul>
<li>At least 5 years of Development Experience in any programming language</li>
<li>Minimum of 8 years of combined hands-on experience as a software engineer, DevOps engineer, and/or Application Security engineer</li>
<li>Previous experience working as a Sales Engineer or Solutions Architect working with application security software products or services</li>
<li>Ability to assess customer requirements, identify business problems, and demonstrate proposed solutions</li>
<li>Programming and scripting proficiency – minimum of two: C#, Java, Typescript, Javascript, Bash, Python, Go</li>
<li>Experience with various application security tools including SAST, SCA, IAST, DAST, API Security, WAF, and RASP</li>
<li>Experience integrating and operating commercial application security solutions (SAST/SCA/DAST/IAST) such as Veracode, Checkmarx, Synopsys, WhiteSource, Snyk, Invicti – Accunetix or Netsparker, Contrast Security</li>
<li>Prior experience working at an application security vendor – bonus points</li>
<li>Experience building secure software based on frameworks such as OWASP SAMM, ASVS, MASVS, CWE, SANS, BSIMM.</li>
<li>Experience in implementing and integrating security tools into CI/CD</li>
<li>Experience with Agile methodologies such as Scrum and Kanban</li>
<li>Knowledge of developer tools and environments, project management and bug tracking systems</li>
<li>Understanding of cloud native development patterns and microservices architecture</li>
</ul>
BONUS QUALIFICATIONS:

<ul>
<li>Experience with Mobile Application Security solutions and practices</li>
<li>Experience with cloud security posture management and cloud workload protection platform solutions such as (Aqua Security, Palo Alto Prisma Cloud, Sysdig, Lacework, Orca Security, Wiz)</li>
<li>Experience with Infrastructure as Code Security solutions such as Bridgecrew, Snyk, and Fugue</li>
<li>Understanding of service-oriented architecture (REST APIs, micro-services, etc) and security best practices</li>
<li>DevOps and Architecture experience and certifications with one of the major public cloud providers (AWS, Azure, Google Cloud)</li>
<li>Experience with securing containers, kubernetes, and AWS Lambda functions</li>
<li>Experience conducting secure coding training and implementing security champions program</li>
<li>Experience conducting threat modeling and application penetration testing</li>
<li>Prior consulting experience is a plus</li>
<li>Must have excellent interpersonal skills, a high degree of professionalism and the ability to design technology solutions for commercial and large enterprise companies</li>
<li>Excellent presentation, communication, and writing skills required</li>
</ul>
The Perks:
<ul>
<li>Comprehensive medical, dental and vision plans for you and your dependents</li>
<li>401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability</li>
<li>Competitive Compensation</li>
<li>Training and development programs</li>
<li>Stocked kitchen with snacks and beverages</li>
<li>Collaborative and cool office culture</li>
<li>Work-life balance and generous paid time off</li>
</ul>
***To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.

New York

Application Security Solutions Architect | Solutioning/Research/Implementation (Remote)

ComplyAdvantage

What you will be doing
As a Security Engineer, you will 
<ul>
<li>Create and evangelise best practice and security policies across the business.</li>
<li>Build out our security operations capabilities, including automating monitoring, alerting and response, including speedy remediation and root cause analysis.</li>
<li>Engaging with engineers and product owners to carry out threat modelling, privacy and security by design activities.</li>
<li>Working with engineering teams to assess and manage security risk within their codebase and suggest mitigation strategies.</li>
<li>Working with the Site Reliability Engineering team and the wider engineering community to build automated security assurance tools into our CI/CD pipeline.</li>
<li>Ensure ongoing compliance with SOC 2, ISO 27001 and related security programmes. </li>
</ul>
About you
As a Security Engineer you will have 
<ul>
<li>Knowledge of information/cyber security standards, e.g. SOC 2, ISO 27001, CIS Controls, CSA STAR, OWASP ASVS, BSIMM.</li>
<li>Experience with securing the SDLC and CI/CD/CO pipeline.</li>
<li>Solid understanding of the majority of the following technologies: Windows, Mac, Linux, containerisation, relational and NoSQL databases, SSO, DHCP, DNS, SSH, PKI.</li>
<li>An aptitude for technology with previous roles working in a technical discipline, such as IT Operations, software development or network/security operations.</li>
<li>Excellent communication skills with the ability to translate complex, technical matters into plain English.</li>
<li>Demonstrable ability to empathise with stakeholders to present security in a positive light.</li>
</ul>
Nice to haves
<ul>
<li>Experience with applying formal threat modelling frameworks such as STRIDE or MITRE.</li>
<li>Experience with infrastructure automation, using Terraform or similar.</li>
<li>Experience with implementing Security Operations Centre infrastructure and practices.</li>
<li>Experience with some of the following; Docker, Kubernetes, Kafka, Istio, Ambassador, Gitlab</li>
<li>Software development or scripting experience using open source languages such as Python, PHP, TypeScript etc.</li>
</ul>
The impact you will have
Building a security culture, processes and tooling is a complex, multi-disciplinary challenge. The role necessitates getting involved in all areas of the business, often working with a mix of senior technical and non-technical stakeholders to establish Security Engineering as a business enabler. In essence, you will find simple solutions to security problems. 
About us
Since launching in 2014, we have been on a mission to neutralize the risk of money laundering, terrorist financing, corruption, and other financial crime on a global scale through our propriety AI-driven technology. 
In that time, we have raised over $100m in funding, have four global hubs located in New York, London, Singapore and Cluj-Napoca and have nearly 400 employees, with ambitious plans to get to 500 by the end of the year! We are rapidly growing and already have a client base of 500 enterprises across 75 different countries. 
No fight against crime is complete without the right values, and we take ours very seriously!
 Focus on the Team - We're Collaborative, Human, and Humble
 Kaizen - We're Curious, Proactive and Agile
 Deliver Results - We're Tenacious, Accountable and Focused
What’s in it for you?
<ul>
<li>Competitive salary aligned to your skills and experience</li>
<li>Equity as we want you to have a part of what we are building </li>
<li>Unlimited Time Off Policy- A work life balance and focus on our wellbeing are critical to keep us performing at our best.</li>
<li>Hybrid working- We want you to strike a balance and be where you do your best work.  You will work with your manager to agree what is best for you and your team. You will also get an annual budget of £215 to kit out your home office</li>
<li>Travel season loan ticket and cycle to work scheme, if you decide that you would like to spend more time in the office </li>
<li>Opportunity to work on innovative projects with smart like-minded people, who are keen to share their knowledge and continuously improve</li>
<li>£2000 annual learning budget to drive your performance and career development</li>
<li>Parental leave and childcare benefits</li>
<li>Private healthcare through Vitality </li>
<li>Life Insurance to protect your loved ones </li>
<li>Pension </li>
</ul>
What will happen next
<ul>
<li>Once your application has been submitted, a member of the Talent Team will review</li>
<li>If successful, they will book you in for an initial phone interview to find out more about your skills and experience, plus give you the opportunity to ask any questions. </li>
<li>If successful, you will then be booked in with the hiring manager. . </li>
<li>If successful, you will then have a final interview with the hiring manager and another Director. </li>
<li>If successful, we will present an offer! </li>
</ul>At ComplyAdvantage diversity fuels our rocket ship and our commitment to inclusion across race, gender, age, religion, identity and experience drives us forward every day. We encourage everyone to apply and aspire to consider every application fairly.
We will handle your information in accordance with our Privacy Policy. For further information, please click <a href="https://complyadvantage.com/privacy-notice/" rel="noopener noreferrer nofollow ugc" target="_blank">here. </a>

London

Security Engineer

Veho

About VehoVeho is a technology-driven shipping company that enables personalized next-day package delivery, extending partner brand value. Veho brand partners have seen a 20% increase in customer repurchase, 40% increase in customer lifetime value, and 8% rise in net promoter score.  Veho gives package recipients greater insight and control, letting them know when they will receive their package, when drivers are en route, and enables real-time rescheduling, address changes, and personal delivery instructions. Veho's technology matches demand for package delivery with a network of qualified crowdsourced driver partners, ensuring every package is delivered on time and correctly.The concept for Veho started as a school project while co-founder Itamar Zur attended Harvard Business School. Zur constantly experienced issues receiving packages - from getting the dreaded “we missed you” note, to stolen packages. He set out to fix the problem so many customers and brands face.Today, Veho’s robust technology platform provides customers and e-commerce brands with an unparalleled shipping experience, an industry record 99.9% average on-time performance for next-day delivery and an average 4.9-star customer rating. With teammates in 30 U.S. states, Veho will be in 50 markets by the end of 2022.  About The RoleVeho’s Chief Information Security Office is looking for an experienced professional to manage and execute efforts to strengthen a foundation of security across Veho’s products, including 3rd party products and their integrations. The role will serve as an expert advisor to the engineering and IT teams. The candidate will contribute to the definition, development, implementation, and maintenance of our product security framework ensuring that best practice initiatives are achieved for system and data integrity, availability, accountability, and assurance. The position will both oversee and execute all aspects of product security functions including architecture, threat modeling, application security, code reviews and assessments.  The role will drive efforts to deepen security engagement early in the software development lifecycle, reducing rework and improving speed to delivery. The role will partner and collaborate with Product and Engineering leadership to establish and evolve processes, controls, and the product security program.
<h3>Responsibilities Include</h3>
<ul>
<li>Review engineering design and architecture, vulnerabilities, code and other findings for products deployed.Identify common security design patterns and influence the adoption of scalable and automated secure platforms and solutions.</li><li>Identify opportunities for improvements to security tooling and automation.</li><li>Be a security advocate and subject matter expert within the organization and be able to effectively communicate security risk and concepts to both technical and non-technical audiences.</li><li>Improve security tooling to facilitate a highly automated and scalable SecDevOps model. Mentor product engineering teams on how to approach security in their day to day work.</li><li>Establish, augment and automate Veho’s security scanning and testing capabilities, bootstrap efforts and execute fixes in alignment with Veho’s vulnerability management policy, ensure findings are triaged and remediated by engineering or other peer teams.</li><li>Facilitate a metrics and reporting framework to measure the efficiency and effectiveness of the program.</li><li>Partner with application engineering, core services and infrastructure engineering, site reliability engineering and other applicable teams to embed security scoring into overall production readiness scoring, using industry best practices such as BSIMM or similar.</li><li>Contribute to security compliance efforts such as ISO27001 / SOC2 certification, privacy and data security law compliance by providing the necessary capabilities and artifacts.</li></ul>
<h3>Skills &amp; Qualifications</h3>
<ul>
<li>BS, BE, BTech or MS in Computer Science, Cybersecurity, Information Technology or other related fields. Equivalent years of experiences without a degree are considered.</li><li>10+ years of relevant education and/or work experience.</li></ul>#LI-RemoteVeho is a growth company that looks for team members to grow with it. Veho offers a generous ownership package, casual work environment, a diverse and inclusive culture, and an electric atmosphere for professional development. No matter the location, or the role, every Veho employee shares one galvanizing mission:  to revolutionize the world of package delivery by creating exceptional experiences for customers and drivers.  We are deeply value-driven (Ownership, Candor, Team Success, Human) and care tremendously about investing in people.  We are committed to creating a diverse team and an environment that provides everyone with the opportunity to do the work of their lifetime. Veho is unable to provide sponsorship at this time.  Applicants must be able to understand and effectively communicate orally and in writing with all parties regarding work matters, which are generally conducted in English.  Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.

United States

Product Security Lead

Copperleaf

Copperleaf’s enterprise software helps some of the world’s largest energy firms make better strategic decisions. We have a track record of delivering award-winning, industry-changing solutions. Join our team as we continue to enable our clients to build more resilient and sustainable infrastructure.
We are looking for a Senior Application Security Specialist to join our software development team to enhance the practice of application security planning and development at Copperleaf. This individual will utilize their software development and application security expertise to ensure excellence in our processes and tooling for secure software development and to ensure that our products are secure.
Responsibilities:
<ul>
<li>Education and training of the wider development team to enhance our Secure Software Development Lifecycle (SSDLC).</li>
<li>Staying abreast of emerging trends and best practices in application security and bringing these to the Copperleaf team.</li>
<li>Security reviews and threat modeling for the application and for key future initiatives.</li>
<li>Guide and advise development teams in application security and compliance.</li>
<li>Guide the adoption of automated security testing to validate that secure coding best practices are being used.</li>
<li>Translate security risks to business impact and advise product leadership and the entire group.</li>
<li>Understand and communicate key gaps in our SSDLC and identify and lead improvements.</li>
</ul>
About you:
You have experience in the following areas:
<ul>
<li>Enterprise software technologies, application security, and infrastructure.</li>
<li>The Microsoft Security Development Lifecycle (SDL), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM).</li>
<li>Amazon Web Services or other cloud computing platform architecture, offerings, and security related services.</li>
<li>Web application security scanning software and related penetration testing tools.</li>
<li>Articulating technically advanced issues to all audiences. Comfortable working with diverse sets of stakeholders, including development teams, product management, and senior leadership.</li>
<li>Training and mentoring software development teams in security-related topics.</li>
<li>Ability to work under pressure, establish priorities and respond with urgency.</li>
</ul>
Experience:
<ul>
<li>4+ years of advanced security experience.</li>
<li>Minimum of 10 years application development experience ideally within the Microsoft development stack.</li>
<li>Applicable certification strongly desired (CSSLP, GWEB etc.) or obtained within 6 months of employment.</li>
</ul>
What’s it like here? 
At Copperleaf, we’re committed to building a great <a href="https://www.copperleaf.com/people-culture/" rel="noopener noreferrer nofollow ugc" target="_blank">culture</a> because we know it sets us apart. Culture is at the very core of everything we do, and it’s what makes people want to be part of the market-leading company we’re building. We are a global team of world-class innovators continually pushing the limits of what’s possible to deliver exceptional value and extraordinary experiences to our clients. To do that, we actively cultivate an open and supportive team environment, where diverse ideas and perspectives are encouraged and respected.Headquartered in Vancouver, Canada, Copperleaf is building a better world, one decision at a time. As one of Canada’s Fastest-Growing Companies, winner of Canada’s Most Admired Corporate Cultures and the BC Tech Association’s Tech Culture of the Year, we are a dynamic and disruptive organization offering exciting opportunities for growth and innovation.Diversity, Equity, and Inclusion are at the heart of Copperleaf’s culture and play a vital role in our growth strategy. We are committed to ensuring that everyone feels a sense of belonging and can contribute to their maximum potential. Our differences are the reason great things happen here. If you are an applicant in need of accommodation or special assistance throughout the interview process, please submit a request by email to <a href="mailto:exsupport@copperleaf.com" rel="noopener noreferrer nofollow ugc" target="_blank">exsupport@copperleaf.com</a>.

Vancouver

Senior Application Security Specialist

Apply to Bsimm Cyber Security Jobs in companies remotely and near you. New Bsimm Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Application Security Solutions Architect \| Solutioning/Research/Implementation (Remote) at Trace3	Remote Full Time Devsecops Consulting Javascript
Security Engineer at ComplyAdvantage	Agile Automation Bsimm DNS Docker
Product Security Lead at Veho	Application Security Automation Bsimm Iso27001 Privacy
Senior Application Security Specialist at Copperleaf	Application Security Bsimm Owasp Penetration Testing SAMM

Bsimm Cyber Security Jobs

0 Bsimm Cyber Security Jobs. Page 1 of 1

4 closed bsimm cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Bsimm Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Bsimm Cyber Security Jobs

0 Bsimm Cyber Security Jobs. Page 1 of 1

4 closed bsimm cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Bsimm Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter