Trace3

Who is Trace3?
Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.
Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!
Trace3 is headquartered in Irvine, California. We employ more than 1000 people all over the United States. Our major field office locations include Atlanta, Denver, Detroit, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, San Diego, San Francisco, and Scottsdale.  
Ready to discover the possibilities that live in technology?

Come Join Us!
Street-Smart - Thriving in Dynamic Times
We are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.
Juice - The “Stuff” it takes to be a Needle Mover 
We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.
Teamwork - Humble, Hungry and Smart
We are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures – not just their success. We appreciate the individuality of the people around us.

About the Role:
Trace3 is looking for an experienced Application Security Professional to join our fast-growing DevSecOps consulting practice to help our customers in evaluating and implementing application security solutions.  This is a hybrid role where you will be spending some of your time in a presales capacity as the hands on solutions expert to support our sales teams to prospect, influence, architect, and scope application security solutions to our customers.  You will help develop application security sales and technical training collaterals for customers and our internal sales teams.  You will conduct research and market analysis of leading application security solution platforms as well as lab testing them to validate coverage and evaluate efficacy.  You will also assist our sales teams to understand client’s business goals and technical requirements to rationalize the appropriate application security solutions for their use cases. 

You will also spend time being responsible for delivering application security services and advise our customers on secure software development.  This includes planning and leading the implementation and adoption of application security platform solutions, reviewing customer software architecture and source code, provide training for developers and management, and drive solutions adoption across multiple development teams. 
What You’ll Do:
<ul>
<li>Lead presales engagements as the Application Security subject matter expert to Trace3 customers and sales teams nationally</li>
<li>Work closely with our sales teams throughout the sales process to ensure all the client’s technical needs are understood and met with the best possible solution options</li>
<li>Drive technical relationships with all stakeholders and support sales opportunities</li>
<li>Present at client facing and industry events as the SME in application security</li>
<li>Conduct research analysis and lab testing of application security solutions to evaluate efficacy, use cases coverage, and fit-for-purpose</li>
<li>Build and maintain application security vendor partner relationships</li>
<li>Contribute to the development of both customer facing and internal facing presales collaterals</li>
<li>Contribute to the development of service offering collaterals and service delivery documentations that we can take to market with selected application security solutions</li>
<li>Champion Agile and DevOps leading-practices, processes, design patterns, and tools in support of DevSecOps transformation</li>
<li>Assist in services opportunity generation, technical scoping, and Statements of Work (SOW) writing</li>
<li>Assist in the delivery of application security services</li>
<li>Promote DevSecOps culture to our customers</li>
<li>Drive adoption of application security tools and DevSecOps practices as part of customer’s transformation</li>
</ul>
Qualifications &amp; Interests:
<ul>
<li>At least 5 years of Development Experience in any programming language</li>
<li>Minimum of 8 years of combined hands-on experience as a software engineer, DevOps engineer, and/or Application Security engineer</li>
<li>Previous experience working as a Sales Engineer or Solutions Architect working with application security software products or services</li>
<li>Ability to assess customer requirements, identify business problems, and demonstrate proposed solutions</li>
<li>Programming and scripting proficiency – minimum of two: C#, Java, Typescript, Javascript, Bash, Python, Go</li>
<li>Experience with various application security tools including SAST, SCA, IAST, DAST, API Security, WAF, and RASP</li>
<li>Experience integrating and operating commercial application security solutions (SAST/SCA/DAST/IAST) such as Veracode, Checkmarx, Synopsys, WhiteSource, Snyk, Invicti – Accunetix or Netsparker, Contrast Security</li>
<li>Prior experience working at an application security vendor – bonus points</li>
<li>Experience building secure software based on frameworks such as OWASP SAMM, ASVS, MASVS, CWE, SANS, BSIMM.</li>
<li>Experience in implementing and integrating security tools into CI/CD</li>
<li>Experience with Agile methodologies such as Scrum and Kanban</li>
<li>Knowledge of developer tools and environments, project management and bug tracking systems</li>
<li>Understanding of cloud native development patterns and microservices architecture</li>
</ul>
BONUS QUALIFICATIONS:

<ul>
<li>Experience with Mobile Application Security solutions and practices</li>
<li>Experience with cloud security posture management and cloud workload protection platform solutions such as (Aqua Security, Palo Alto Prisma Cloud, Sysdig, Lacework, Orca Security, Wiz)</li>
<li>Experience with Infrastructure as Code Security solutions such as Bridgecrew, Snyk, and Fugue</li>
<li>Understanding of service-oriented architecture (REST APIs, micro-services, etc) and security best practices</li>
<li>DevOps and Architecture experience and certifications with one of the major public cloud providers (AWS, Azure, Google Cloud)</li>
<li>Experience with securing containers, kubernetes, and AWS Lambda functions</li>
<li>Experience conducting secure coding training and implementing security champions program</li>
<li>Experience conducting threat modeling and application penetration testing</li>
<li>Prior consulting experience is a plus</li>
<li>Must have excellent interpersonal skills, a high degree of professionalism and the ability to design technology solutions for commercial and large enterprise companies</li>
<li>Excellent presentation, communication, and writing skills required</li>
</ul>
The Perks:
<ul>
<li>Comprehensive medical, dental and vision plans for you and your dependents</li>
<li>401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability</li>
<li>Competitive Compensation</li>
<li>Training and development programs</li>
<li>Stocked kitchen with snacks and beverages</li>
<li>Collaborative and cool office culture</li>
<li>Work-life balance and generous paid time off</li>
</ul>
***To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.

New York

Application Security Solutions Architect | Solutioning/Research/Implementation (Remote)

GuidePoint Security

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.GuidePoint Security offers an inclusive set of Application Security services helping clients implement, fine tune and run their Application Security SAST, DAST and SCA tools. Many clients need assistance with either supplementing their Application Security teams or simply need teammates who have a specialization in Application Security. Candidates must be located in Eastern or Central times zones to be considered.
Please Note: This is a remote position however candidates must located in the Eastern or Central time zones to be considered.
Roles and Responsibilities:• Perform code reviews• Run client SAST/DAST tools, review outputs and provide recommendations• Perform manual based assessmentsExperience Requirements:• Knowledge of SAST/DAST Application Security tools such as: Burp Suite, Netsparker, Veracode, Checkmarx, etc.• Understanding of a broad range of Application Security issues as well as their mitigation strategies• Understanding of Application Security related vulnerabilities • Experience with reviewing source code written in JavaScript, Python, Java, C++, PHP, or C# a plus• Written communication skills for written interactions with clients• Strong communication skills that include the ability to clearly articulate thoughts and distill complex problems into digestible pieces of information• Personal drive and passion to not only continue growing yourself but also the Application Security Engineering practice• Standard industry certifications are preferredWhy GuidePoint?GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 675 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 3,000 Enterprise-Level customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.  
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.Some added perks….
<ul>
<li>Remote workforce primarily (U.S. based only, some travel may be required for certain positions)</li>
<li>100% employer-paid medical and dental premiums with generous employer family contributions</li>
<li>11 corporate holidays and a Flexible Time Off (FTO) program</li>
<li>Healthy mobile phone and home internet allowance</li>
<li>Eligibility for retirement plan after 2 months at open enrollment</li>
</ul>

Eastern

Nueva Ecija

Application Security Analyst - Southeast (Remote)

Celonis

We're Celonis, the global leading Process Mining software company and one of the world's fastest-growing SaaS firms. We believe that every company can unlock its full execution capacity - and for that, we need you to join us as an Application Security Engineer.
The Team:
Within our InfoSec organization, our global security engineering team is responsible for designing, building, and enhancing the underlying security components that help with securing the Celonis Application and Platforms stacks. We think about both offensively and defensively. We continuously monitor our global security posture and are always adapting to the ever-changing threat landscape. The security engineering team is looking for talented subject matter experts in application, platform and offensive security.
The Role:
Celonis is looking for an Application Security Engineer to help assess and validate that our services, applications, and websites are designed and implemented to the highest security standards. You will be responsible for analyzing the security of applications and services, discovering and addressing security issues, building security automation, and quickly reacting to new threat scenarios. You will have the opportunity to learn from, and be mentored by, those who are building and securing our cutting-edge application layer services.
The work you’ll do:
<ul>
<li>You will participate in threat modeling, application architecture review, security code review, security assessment, penetration testing (web application, native application, web services, cloud-based services, and infrastructure assessments).</li>
<li>Conducting security architecture reviews of the application stack, including applications built on cloud and emerging technologies</li>
<li>Reviewing source code for potential security issues</li>
<li>Writing security test cases to check for vulnerabilities or broken/missing security controls</li>
<li>Providing specific risk assessment and remediation guidelines for developers and business owners</li>
<li>Researching the latest security best practices, trends, threats and vulnerabilities, and technology frameworks</li>
<li>Perform in-depth security review of new features. This includes identifying security vulnerabilities (OWASP top ten, common issues in NVD, RCE), reviewing code in Java or C++, verifying security posture through pen-test (using manual/automated techniques with tools like Kali Linux, Burp suite, Checkmarx, WebInspect).</li>
<li>You will partner with engineering and operation teams to integrate mitigation controls into continuous integration, delivery and deployment processes.</li>
<li>Work on essential areas to develop security baseline for cloud, container, and application and integrate it into the CI/CD pipeline.</li>
<li>Implement security architecture, methods, and controls required to meet security, compliance, and audit requirements (NIST controls, SOC2, etc.).</li>
</ul>
The qualifications you need:
<ul>
<li>3+ years previous experience in information security.</li>
<li>2+ years’ experience working within software development.</li>
<li>A bachelor’s degree in Computer Science/Information Security/Cyber Security or equivalent.</li>
<li>Excellent written and oral communication skills, as well as social skills including the ability to articulate to both technical and non-technical audiences.</li>
<li>Able to work both independently as well with development teams and multi-task effectively.</li>
<li>Firm understanding of enterprise class application architectures that are highly scalable and reliable and the expertise to secure them.</li>
<li>Experience of security architecture and design reviews.</li>
<li>Experience with multiple languages such as Java, Go, Python etc. and understand how to detect and remedy related security issues such as OWASP top 10.</li>

</ul>
What Celonis can offer you:
<ul>
<li>The unique opportunity to work within a new category of technology, Execution Management</li>
<li>Investment in your personal growth and skill development (clear career paths, internal mobility opportunities, mentorships, yearly development stipend)</li>
<li>Great compensation and benefits packages (stock options, 401(K) matching, generous time off, parental leave, and more)</li>
<li>Work from home support (mindfulness tools such as Headspace, monthly remote working stipend, flexible working hours, virtual events and workshops)</li>
<li>A global and growing team of Celonauts from diverse backgrounds to learn from and work with</li>
<li>An open-minded culture with innovative, autonomous teams</li>
<li>Employee resource communities to help you feel connected, valued and seen (Women@Celonis, Parents@Celonis, Pride@Celonis, Resilience@Celonis, and more)</li>
<li>A clear set of <a href="https://www.celonis.com/company/values/" rel="noopener noreferrer nofollow ugc" target="_blank">company values</a> that guide everything we do: Live for Customer Value, The Best Team Wins, We Own It, and Earth Is Our Future</li>
</ul>
About Us
Celonis believes that every company can unlock its full execution capacity. Powered by its market-leading process mining core, the Celonis Execution Management System provides a set of applications, and developer studio and platform capabilities for business executives and users to eliminate billions in corporate inefficiencies. Celonis has thousands of global customers and is headquartered in Munich, Germany and New York City, USA with 15 offices worldwide.Celonis is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. <a href="https://www.celonis.com/careers/diversity/" rel="noopener noreferrer nofollow ugc" target="_blank">Different makes us better</a>.

Munich

Application Security Engineer.

We're Celonis, the global leading Process Mining software company and one of the world's fastest-growing SaaS firms. We believe that every company can unlock its full execution capacity - and for that, we need you to join us as an Application Security Engineer Information Security (“InfoSec”) organization. 

The  Team:
Within our InfoSec organization, Our global security engineering team is responsible for designing, building, and enhancing the underlying security components that help with securing the Celonis Application and Platforms stacks. We think about both offensively and defensively. We continuously monitor our global security posture and are always adapting to the ever-changing threat landscape. The security engineering team is looking for talented subject matter experts in application, platform and offensive security.

The Role:
Celonis is looking for an Application Security Engineer to help assess and validate that our services, applications, and websites are designed and implemented to the highest security standards. You will be responsible for analyzing the security of applications and services, discovering and addressing security issues, building security automation, and quickly reacting to new threat scenarios. You will have the opportunity to learn from, and be mentored by, those who are building and securing our cutting-edge application layer services.

The work you’ll do:
<ul>
<li>You will participate in threat modeling, application architecture review, security code review, security assessment, penetration testing (web application, native application, web services, cloud-based services, and infrastructure assessments).</li>
<li>Conducting security architecture reviews of the application stack, including applications built on cloud and emerging technologies</li>
<li>Reviewing source code for potential security issues</li>
<li>Writing security test cases to check for vulnerabilities or broken/missing security controls</li>
<li>Providing specific risk assessment and remediation guidelines for developers and business owners</li>
<li>Researching the latest security best practices, trends, threats and vulnerabilities, and technology frameworks</li>
</ul>
<ul>
<li>Perform in-depth security review of new features. This includes identifying security vulnerabilities (OWASP top ten, common issues in NVD, RCE), reviewing code in Java or C++, verifying security posture through pen-test (using manual/automated techniques with tools like Kali Linux, Burp suite, Checkmarx, WebInspect).</li>
<li>You will partner with engineering and operation teams to integrate mitigation controls into continuous integration, delivery and deployment processes.</li>
<li>Work on essential areas to develop security baseline for cloud, container, and application and integrate it into the CI/CD pipeline.</li>
</ul>
<ul>
<li>Implement security architecture, methods, and controls required to meet security, compliance, and audit requirements (NIST controls, SOC2, etc.).</li>
</ul>

The qualifications you’ll need:
<ul>
<li>3+ years previous experience in information security.</li>
<li>2+ years’ experience working within software development.</li>
<li>A bachelor’s degree in Computer Science/Information Security/Cyber Security or equivalent.</li>
<li>Excellent written and oral communication skills, as well as social skills including the ability to articulate to both technical and non-technical audiences.</li>
<li>Able to work both independently as well with development teams and multi-task effectively.</li>
<li>Firm understanding of enterprise class application architectures that are highly scalable and reliable and the expertise to secure them.</li>
<li>Experience of security architecture and design reviews.</li>
<li>Experience with multiple languages such as Java, Go, Python etc. and understand how to detect and remedy related security issues such as OWASP top 10.</li>
</ul>

What Celonis can offer you:
<ul>
<li>The unique opportunity to work within a new category of technology, Execution Management</li>
<li>Investment in your personal growth and skill development (clear career paths, internal mobility opportunities, mentorships, yearly development stipend)</li>
<li>Great compensation and benefits packages (stock options, 401(K) matching, generous time off, parental leave, and more)</li>
<li>Work from home support (mindfulness tools such as Headspace, monthly remote working stipend, flexible working hours, virtual events and workshops)</li>
<li>A global and growing team of Celonauts from diverse backgrounds to learn from and work with</li>
<li>An open-minded culture with innovative, autonomous teams</li>
<li>Employee resource communities to help you feel connected, valued and seen (Women@Celonis, Parents@Celonis, Pride@Celonis, Resilience@Celonis, and more)</li>
<li>A clear set of <a href="https://www.celonis.com/company/values/" rel="noopener noreferrer nofollow ugc" target="_blank">company values</a> that guide everything we do: Live for Customer Value, The Best Team Wins, We Own It, and Earth Is Our Future</li>
</ul>

About Us
Celonis believes that every company can unlock its full execution capacity. Powered by its market-leading process mining core, the Celonis Execution Management System provides a set of applications, and developer studio and platform capabilities for business executives and users to eliminate billions in corporate inefficiencies. Celonis has thousands of global customers and is headquartered in Munich, Germany and New York City, USA with 15 offices worldwide.

Celonis is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. <a href="https://www.celonis.com/careers/diversity/" rel="noopener noreferrer nofollow ugc" target="_blank">Different makes us better</a>.

Madrid

Application Security Engineer

Span.IO, Inc.

<h3>Our Mission  </h3>
SPAN develops products that accelerate the rapid adoption of renewable energy in the home. The flagship SPAN Smart Panel is the first true evolution for the traditional home electric panel, harnessing enhanced technology for metering, monitoring, and control. An expanded product suite of intelligent, integrated solutions radically lowers the cost and complexity of energy upgrades–including solar, batteries and EVs–empowering homeowners to be active, resilient and informed players in the energy market. 

The Role
We are looking for a hands-on individual with a white hat hacker mindset to join us in an Application Security Lead Role as part of the Security &amp; IT team at Span. You will be responsible for building out Span’s application security program and architecting, developing and deploying application security tools and technologies to protect Span's platform and backend infrastructure. Responsibilities include:

<ul>
<li>Develop the secure SDLC process at Span andperform static security code analysis (SAST) of Span's code base on a regular basis and provide relevant recommendations to Span's developers.</li>
<li>Perform dynamic application security testing (DAST) using open source and commercial tools before applications are deployed in production.</li>
<li>Perform threat modeling on existing and upcoming feature sets in the Span applications so that appropriate security controls can be built from the ground up.</li>
<li>Review security alerts and reports on a daily basis and work closely with the DevOps team in any follow up investigation or remediation.</li>
<li>Manage the bug bounty program at Span and work with the developers for timely remediation of the reported issues.</li>
<li>Manage external independent Application Security Testing and ensure timely remediation of issues.</li>
<li>Identify all vulnerabilities originating from third party dependencies and ensure timely remediation.</li>
<li>Impart ongoing secure code and application security best practices training to developers.</li>
</ul>

About You 
We are seeking an Application Security Lead who has:
<ul>
<li>Bachelors in Computer Science or related field</li>
<li>5+ years in a security engineering or operations role</li>
<li>Strong knowledge of applied cryptography, web security, TLS/SSL, web authentication protocols such as OAuth/SAML</li>
<li>Experience in using scripting languages e.g. Python, Perl, PHP, Ruby to automate tasks and manipulate data</li>
<li>Experience with developing threat models (STRIDE, DREAD, etc.)</li>
<li>Comfortable with security tools like Burp Suite, OWASP ZAP, CheckMarx, Veracode, MetaSploit, App Spider etc.</li>
<li>Experience with automation tools like Ansible, Chef, Puppet, Jenkins desired but not a must have</li>
<li>Experience with automated application testing tools/frameworks e.g. Selenium, SonarQube</li>
<li>Experience with Web Application Firewalls (WAF) desired but not a must have</li>
</ul>

<h3>Life at SPAN</h3>
SPAN embraces diversity and equal opportunity in a serious way. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. 
Headquartered in San Francisco’s vibrant SoMa neighborhood, we are an eclectic group of creative thinkers who value open communication, teamwork, and a ‘make it happen’ approach to addressing complex challenges. 
Our CEO, Arch Rao⁠—former head of the Tesla Powerwall team⁠—fosters an energetic and collaborative environment, with a strong emphasis on maintaining work-life-balance across the organization.
We’re hiring talented individuals who are driven by success and are passionate about shaping the future of renewable energy. If that sounds like you, we’d love for you to consider joining the rapidly growing team at SPAN.
The Perks:
⚡ Competitive compensation + equity grants at a well-funded, venture-backed company
⚡ Comprehensive benefits (including medical; dental, vision, life and disability insurance)
⚡ Comfortable, sunny office space located near BART and Caltrain public transit
⚡ Strong focus on teambuilding and company culture (events, meet-ups, clubs)
⚡ Flexible hours and unlimited PTO
Our Mission &amp; Values:
At SPAN, we believe that powering your home with clean energy should be a simple and delightful experience that is at its essence human-centered and technology-forward.
Our core values include:
<ul>
<li>Making home energy more accessible, intuitive, and convenient.</li>
<li>Enabling homes and vehicles to be powered by the sun.</li>
<li>Building resilient homes with reliable power.</li>
<li>All-electric everything.</li>
<li>A more flexible &amp; distributed grid.</li>
</ul>
Interested in joining our team? Submit an application today and we’ll be in touch with next steps!

San Francisco

Application Security Lead

Apply to Checkmarx Cyber Security Jobs in companies remotely and near you. New Checkmarx Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Application Security Solutions Architect \| Solutioning/Research/Implementation (Remote) at Trace3	Remote Full Time Devsecops Consulting Javascript
Application Security Analyst - Southeast (Remote) at GuidePoint Security	Application Security Burp Suite C Checkmarx DAST
Application Security Engineer. at Celonis	Application Security Automation Burp Suite C Checkmarx
Application Security Engineer at Celonis	Application Security Automation Burp Suite C Checkmarx
Application Security Lead at Span.IO, Inc.	Ansible Application Security Automation Burp Suite Checkmarx

Checkmarx Cyber Security Jobs

0 Checkmarx Cyber Security Jobs. Page 1 of 1

5 closed checkmarx cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Checkmarx Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Checkmarx Cyber Security Jobs

0 Checkmarx Cyber Security Jobs. Page 1 of 1

5 closed checkmarx cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Checkmarx Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter