AppZen, Inc.

AppZen is the leader in Finance AI software built to deliver autonomous processing for modern finance teams. Our patented artificial intelligence software uses deep learning, semantic analysis, and computer vision to accurately and efficiently process intelligence from thousands of data sources, documents, and images so that organizations can better understand financial transactions and make smarter business decisions. Over 1,000 global enterprises, including one-third of the Fortune 500, use AppZen’s Expense Audit and Autonomous AP products to replace manual finance processes and accelerate the speed and agility of their business. Visit us at <a href="http://www.appzen.com" rel="noopener noreferrer nofollow ugc" target="_blank">www.appzen.com</a> and follow us on <a href="https://www.linkedin.com/company/appzen/" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>.We have taken off this year! Since releasing our platform in 2016, over 1,800 enterprises have standardized on AppZen, including four of the top five banks, four of the top ten media companies, four of the top ten pharmaceutical manufacturers, two of the top five aerospace companies, and five of the top ten software providers. We were a Gartner Cool Vendor and have been recognized as one of the fastest-growing technology companies in the market. In 2019 we received $50 million in Series C funding from Lightspeed, Redpoint and other leading venture capital firms.
<h3>Roles and Responsibilities :</h3>
<ul>
<li>Monitor computer networks for security issues.</li><li>Investigate security breaches and other cyber security incidents.</li><li> Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs.</li><li> Document security breaches and assess the damage they cause.</li><li> Work with security team to perform tests and uncover network vulnerabilities.</li><li> Fix detected vulnerabilities to maintain a high-security standard.</li><li> Stay current on IT security trends and news.</li><li> Develop company-wide best practices for IT security.</li><li> Perform penetration testing.</li><li>Help colleagues install security software and understand information security management.</li><li> Research security enhancements and make recommendations to management.</li><li> Stay up to date on information technology trends and security standards.</li></ul>
<h3>Skills Required :</h3>
<ul>
<li>6+ years’ experience as Information Security Analyst at a SaaS company.</li><li>AWS Infrastructure and security Knowledge.</li><li>Exposure to Application Security Architectures such as OWASP, TOGAF, SWE/SANS.</li><li>Good knowledge of SOC1/SOC2, ITIL and ISO 27001 a plus.</li><li>Hands on experience with Burp / Kali or other security tools.</li></ul>We are equal opportunity employer and value diversity. All employment is decided on the basis of qualifications, merit and business need.

Pune

Security Engineer

Veeva Systems

Veeva [NYSE: VEEV] is the leader in cloud-based software for the global life sciences industry. Committed to innovation, product excellence, and customer success, our customers range from the world’s largest pharmaceutical companies to emerging biotechs. Veeva’s software helps our customers bring medicines and therapies to patients faster.We are the first public company to become a <a href="https://www.veeva.com/pbc/" rel="noopener noreferrer nofollow ugc" target="_blank">Public Benefit Corporation</a>. As a PBC, we are committed to making the industries we serve more productive, and we are committed to creating high-quality employment opportunities.Veeva is a <a href="https://www.veeva.com/work-anywhere/" rel="noopener noreferrer nofollow ugc" target="_blank">Work Anywhere</a> company which means that you can choose to work in the environment that works best for you - on any given day. Whether you choose to work remotely from home or work in an office - it’s up to you.The RoleVeeva’s Security Engineering Team is seeking Red Teamers to help keep Veeva secure and safe from attackers. Our team in Columbus is growing, and we want you to join us! This role has a broad scope, ranging from attacking Veeva’s AWS services, infrastructure and processes, and products. Discovering weaknesses in Veeva’s architecture. Working with product and platform teams performing penetration tests on new products. Working with third-party testers and researchers to sharpen our detective and preventative capabilities. This role presents an ultimate test of one’s security knowledge and ability, along with the support of a team of highly skilled individuals.
<h3>What You'll Do </h3>
<ul>
<li>A Red Team Security Engineer at Veeva is expected to be strong in offensive security domains, testing, techniques, and practices.  Engineers in this role work closely with application product teams throughout Veeva. Security engineers will provide technical leadership and advice to developers, engineers, and third-party consultants.</li><li>As a Red Team Engineer, you must show exemplary judgment in making informed technical trade-offs of testing, short-term fixes, long-term security gains, and product team development. You must also demonstrate resilience and navigate difficult situations with composure and tact. Above all else, a strong sense of customer obsession is necessary to focus on the ultimate goal of keeping Veeva and its customers secure.</li><li>Participate in Red Team engagements throughout Veeva with few limits and restrictions</li><li>Conduct full-cycle engagements with development teams independently, or as part of a team</li><li>Perform manual examination of Veeva systems, websites, and networks to discover weaknesses</li><li>Thoroughly document exploits, attack chains, and proof of concept scenarios for technical reviews</li><li>Communicate findings and discoveries to prioritize and execute remediation plans</li><li>Coordinate findings and remediation from third-party penetration testers</li><li>Maintain AWS VPC and related testing systems for our internal and third-party testing programs</li><li>Conduct red team, and purple team exercises and coordinate tabletop exercises</li><li>Penetration tests of new products, concepts, and pilot products</li><li>Review Veeva product release notes and select new features to test throughout the year</li></ul>
<h3>Requirements </h3>
<ul>
<li>BS in Computer Science or related field, or equivalent work experience</li><li>2+ years in an Information Security role, preferably in red teaming, offensive security, penetration testing, reverse engineering, incident response, or vulnerability management</li><li>Advanced knowledge and understanding in various disciplines such as security engineering, system and network security, authentication and security protocols, cryptography, and application security</li><li>Experience with interpreted or compiled languages: Python, Ruby, Perl, PHP, C/C++, Java, C#</li><li>Experience with cloud service providers and their offerings, preferably AWS and its various technologies and APIs</li><li>Mobile testing on Windows, iOS, and Android</li><li>Experience with various testing tools, such as Netspaker, Kali Linux, Metasploit, Nmap, Nessus, Burp Suite, etc.</li><li>Familiar with offensive TTPs (Tactics, Techniques, and Procedures) including post-exploitation and lateral movement</li><li>Experience with Redhat, AWS Linux, AWS Linux 2, Windows Server 2012, 2016 and 2019</li><li>Understanding of one or more standards: OSWAP Top 10, SANS Top 20, NIST 800-53, CIS, CSC, or other security standards</li></ul>
<h3>Nice to Have </h3>
<ul>
<li>Industry penetration certifications such as OSCP, GPEN, GXPN, GWAPT, etc.</li><li>Industry security certifications such as CISSP, CEH, or others</li><li>Experience in conducting social engineering-focused assessments</li><li>Experience in CTF competitions, CVE research, and/or Bug Bounty recognition</li><li>Knowledge of the MITRE ATT&amp;CK Framework</li><li>Experience in Web and Mobile (Android/iOS) based application/service assessment</li><li>Experience in Wireless and Network assessment in enterprise infrastructure</li><li>Experience in reverse engineering and associated tooling such as IDA</li><li>Experience in Advanced Persistent Threat exploits</li><li>Experience with Web Application Firewalls (WAF), IDS/IPS, or other security platforms</li><li>Knowledge of fuzzing, memory corruption, and exploit development</li><li>Knowledge about hardware hacking</li></ul>#LI-RemoteUS#BI-RemoteVeeva’s headquarters is located in the San Francisco Bay Area with offices in more than 15 countries around the world. Veeva is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin or ancestry, age, disability, marital status, pregnancy, protected veteran status, protected genetic information, political affiliation, or any other characteristics protected by local laws, regulations, or ordinances. If you need assistance or accommodation due to a disability or special need when applying for a role or in our recruitment process, please contact us at talent_accommodations@veeva.com.

New York

Security Engineer - Red Team Penetration Testing

Celonis

We're Celonis, the global leading Process Mining software company and one of the world's fastest-growing SaaS firms. We believe that every company can unlock its full execution capacity - and for that, we need you to join us as an Application Security Engineer.
The Team:
Within our InfoSec organization, our global security engineering team is responsible for designing, building, and enhancing the underlying security components that help with securing the Celonis Application and Platforms stacks. We think about both offensively and defensively. We continuously monitor our global security posture and are always adapting to the ever-changing threat landscape. The security engineering team is looking for talented subject matter experts in application, platform and offensive security.
The Role:
Celonis is looking for an Application Security Engineer to help assess and validate that our services, applications, and websites are designed and implemented to the highest security standards. You will be responsible for analyzing the security of applications and services, discovering and addressing security issues, building security automation, and quickly reacting to new threat scenarios. You will have the opportunity to learn from, and be mentored by, those who are building and securing our cutting-edge application layer services.
The work you’ll do:
<ul>
<li>You will participate in threat modeling, application architecture review, security code review, security assessment, penetration testing (web application, native application, web services, cloud-based services, and infrastructure assessments).</li>
<li>Conducting security architecture reviews of the application stack, including applications built on cloud and emerging technologies</li>
<li>Reviewing source code for potential security issues</li>
<li>Writing security test cases to check for vulnerabilities or broken/missing security controls</li>
<li>Providing specific risk assessment and remediation guidelines for developers and business owners</li>
<li>Researching the latest security best practices, trends, threats and vulnerabilities, and technology frameworks</li>
<li>Perform in-depth security review of new features. This includes identifying security vulnerabilities (OWASP top ten, common issues in NVD, RCE), reviewing code in Java or C++, verifying security posture through pen-test (using manual/automated techniques with tools like Kali Linux, Burp suite, Checkmarx, WebInspect).</li>
<li>You will partner with engineering and operation teams to integrate mitigation controls into continuous integration, delivery and deployment processes.</li>
<li>Work on essential areas to develop security baseline for cloud, container, and application and integrate it into the CI/CD pipeline.</li>
<li>Implement security architecture, methods, and controls required to meet security, compliance, and audit requirements (NIST controls, SOC2, etc.).</li>
</ul>
The qualifications you need:
<ul>
<li>3+ years previous experience in information security.</li>
<li>2+ years’ experience working within software development.</li>
<li>A bachelor’s degree in Computer Science/Information Security/Cyber Security or equivalent.</li>
<li>Excellent written and oral communication skills, as well as social skills including the ability to articulate to both technical and non-technical audiences.</li>
<li>Able to work both independently as well with development teams and multi-task effectively.</li>
<li>Firm understanding of enterprise class application architectures that are highly scalable and reliable and the expertise to secure them.</li>
<li>Experience of security architecture and design reviews.</li>
<li>Experience with multiple languages such as Java, Go, Python etc. and understand how to detect and remedy related security issues such as OWASP top 10.</li>

</ul>
What Celonis can offer you:
<ul>
<li>The unique opportunity to work within a new category of technology, Execution Management</li>
<li>Investment in your personal growth and skill development (clear career paths, internal mobility opportunities, mentorships, yearly development stipend)</li>
<li>Great compensation and benefits packages (stock options, 401(K) matching, generous time off, parental leave, and more)</li>
<li>Work from home support (mindfulness tools such as Headspace, monthly remote working stipend, flexible working hours, virtual events and workshops)</li>
<li>A global and growing team of Celonauts from diverse backgrounds to learn from and work with</li>
<li>An open-minded culture with innovative, autonomous teams</li>
<li>Employee resource communities to help you feel connected, valued and seen (Women@Celonis, Parents@Celonis, Pride@Celonis, Resilience@Celonis, and more)</li>
<li>A clear set of <a href="https://www.celonis.com/company/values/" rel="noopener noreferrer nofollow ugc" target="_blank">company values</a> that guide everything we do: Live for Customer Value, The Best Team Wins, We Own It, and Earth Is Our Future</li>
</ul>
About Us
Celonis believes that every company can unlock its full execution capacity. Powered by its market-leading process mining core, the Celonis Execution Management System provides a set of applications, and developer studio and platform capabilities for business executives and users to eliminate billions in corporate inefficiencies. Celonis has thousands of global customers and is headquartered in Munich, Germany and New York City, USA with 15 offices worldwide.Celonis is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. <a href="https://www.celonis.com/careers/diversity/" rel="noopener noreferrer nofollow ugc" target="_blank">Different makes us better</a>.

Munich

Application Security Engineer.

We're Celonis, the global leading Process Mining software company and one of the world's fastest-growing SaaS firms. We believe that every company can unlock its full execution capacity - and for that, we need you to join us as an Application Security Engineer Information Security (“InfoSec”) organization. 

The  Team:
Within our InfoSec organization, Our global security engineering team is responsible for designing, building, and enhancing the underlying security components that help with securing the Celonis Application and Platforms stacks. We think about both offensively and defensively. We continuously monitor our global security posture and are always adapting to the ever-changing threat landscape. The security engineering team is looking for talented subject matter experts in application, platform and offensive security.

The Role:
Celonis is looking for an Application Security Engineer to help assess and validate that our services, applications, and websites are designed and implemented to the highest security standards. You will be responsible for analyzing the security of applications and services, discovering and addressing security issues, building security automation, and quickly reacting to new threat scenarios. You will have the opportunity to learn from, and be mentored by, those who are building and securing our cutting-edge application layer services.

The work you’ll do:
<ul>
<li>You will participate in threat modeling, application architecture review, security code review, security assessment, penetration testing (web application, native application, web services, cloud-based services, and infrastructure assessments).</li>
<li>Conducting security architecture reviews of the application stack, including applications built on cloud and emerging technologies</li>
<li>Reviewing source code for potential security issues</li>
<li>Writing security test cases to check for vulnerabilities or broken/missing security controls</li>
<li>Providing specific risk assessment and remediation guidelines for developers and business owners</li>
<li>Researching the latest security best practices, trends, threats and vulnerabilities, and technology frameworks</li>
</ul>
<ul>
<li>Perform in-depth security review of new features. This includes identifying security vulnerabilities (OWASP top ten, common issues in NVD, RCE), reviewing code in Java or C++, verifying security posture through pen-test (using manual/automated techniques with tools like Kali Linux, Burp suite, Checkmarx, WebInspect).</li>
<li>You will partner with engineering and operation teams to integrate mitigation controls into continuous integration, delivery and deployment processes.</li>
<li>Work on essential areas to develop security baseline for cloud, container, and application and integrate it into the CI/CD pipeline.</li>
</ul>
<ul>
<li>Implement security architecture, methods, and controls required to meet security, compliance, and audit requirements (NIST controls, SOC2, etc.).</li>
</ul>

The qualifications you’ll need:
<ul>
<li>3+ years previous experience in information security.</li>
<li>2+ years’ experience working within software development.</li>
<li>A bachelor’s degree in Computer Science/Information Security/Cyber Security or equivalent.</li>
<li>Excellent written and oral communication skills, as well as social skills including the ability to articulate to both technical and non-technical audiences.</li>
<li>Able to work both independently as well with development teams and multi-task effectively.</li>
<li>Firm understanding of enterprise class application architectures that are highly scalable and reliable and the expertise to secure them.</li>
<li>Experience of security architecture and design reviews.</li>
<li>Experience with multiple languages such as Java, Go, Python etc. and understand how to detect and remedy related security issues such as OWASP top 10.</li>
</ul>

What Celonis can offer you:
<ul>
<li>The unique opportunity to work within a new category of technology, Execution Management</li>
<li>Investment in your personal growth and skill development (clear career paths, internal mobility opportunities, mentorships, yearly development stipend)</li>
<li>Great compensation and benefits packages (stock options, 401(K) matching, generous time off, parental leave, and more)</li>
<li>Work from home support (mindfulness tools such as Headspace, monthly remote working stipend, flexible working hours, virtual events and workshops)</li>
<li>A global and growing team of Celonauts from diverse backgrounds to learn from and work with</li>
<li>An open-minded culture with innovative, autonomous teams</li>
<li>Employee resource communities to help you feel connected, valued and seen (Women@Celonis, Parents@Celonis, Pride@Celonis, Resilience@Celonis, and more)</li>
<li>A clear set of <a href="https://www.celonis.com/company/values/" rel="noopener noreferrer nofollow ugc" target="_blank">company values</a> that guide everything we do: Live for Customer Value, The Best Team Wins, We Own It, and Earth Is Our Future</li>
</ul>

About Us
Celonis believes that every company can unlock its full execution capacity. Powered by its market-leading process mining core, the Celonis Execution Management System provides a set of applications, and developer studio and platform capabilities for business executives and users to eliminate billions in corporate inefficiencies. Celonis has thousands of global customers and is headquartered in Munich, Germany and New York City, USA with 15 offices worldwide.

Celonis is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. <a href="https://www.celonis.com/careers/diversity/" rel="noopener noreferrer nofollow ugc" target="_blank">Different makes us better</a>.

Madrid

Application Security Engineer

Ninja Van

Ninja Van is a late-stage logtech startup that is disrupting a massive industry with innovation and cutting edge technology. Launched 2014 in Singapore, we have grown rapidly to become one of Southeast Asia's largest and fastest-growing express logistics companies. Since our inception, we’ve delivered to 100 million different customers across the region with added predictability, flexibility and convenience. Join us in our mission to connect shippers and shoppers across Southeast Asia to a world of new possibilities. More about us: - We process 250 million API requests and 3TB of data every day.- We deliver more than 1.5 million parcels every day.- 100% network coverage with 1000+ hubs and stations in 6 SEA markets (Singapore, Malaysia, Indonesia, Thailand, Vietnam and Philippines), reaching 500 million consumers.- 600,000 active shippers in all e-commerce segments, from the largest marketplaces to the individual social commerce sellers.- Raised more than US$500 million over five rounds.We are looking for world-class talent to join our crack team of engineers, product managers and designers. We want people who are passionate about creating software that makes a difference to the world. We like people who are brimming with ideas and who take initiative rather than wait to be told what to do. We prize team-first mentality, personal responsibility and tenacity to solve hard problems and meet deadlines. As part of a small and lean team, you will have a very direct impact on the success of the company. You need to have knowledge in securing inhouse developed products by performing Web Application, Mobile and API security testing with knowledge of OWASP Top 10 vulnerabilities.As a team member, you will work with engineering teams to build secure products. Being part of our team, you will manage a portfolio of Web Application’s, Mobile Application Security and API’s Security. There would also be knowledge sharing sessions by attending various security conferences, trainings and internal hackathons.
<h3>Role and Responsibilities </h3>
<ul>
<li> Work individually or as a part of team conducting manual code reviews, static vulnerability scanning, vulnerability validations and false positive analysis                                                                         </li><li> Enhance existing application security tools and introduce new tools where applicable                                                                                 </li><li> Perform Application Security assessment and sometimes manual code reviews of web applications, web services, mobile, front-end &amp; back-end services                     </li><li>Work closely with software engineers from the various development teams to build a secure architecture and coding standard across the organization                             </li><li>Communicate technical and business risk of the vulnerabilities discovered including remediation recommendations      </li><li>Work with internal teams to support them in remediation efforts</li><li>Keep abreast with latest technology risks and utilize them in work                                                                            </li><li>Contribute to the information security strategy and rollout of the strategy</li></ul>
<h3>Requirements</h3>
<ul>
<li>Degree in Computer Science and Engineering </li><li>Experience in Application Security and Code Reviews with sufficient security background (5+ years in Security and 2+ years in software development)</li><li>Experience with penetration testing tools and tool suites such as Burp Suite Pro, OWASP Zap, Postman, Kali Linux, SQLMap, Nessus, etc.</li><li>Experience in web application security, mobile security, API security with knowledge of application vulnerabilities and business logic flaws and threats</li><li>Programming language skills such as Java, ReactJs,NodeJs Javascript (nice to have).</li><li>Experience in security risk assessment and threat modeling of applications</li><li>Familiarity with Google, Kubernetes, Docker, and Terraform</li><li>Excellent language skills and ability communicate complex vulnerabilities to internal teams</li><li>Well versed with OWASP Code Review Guide</li><li>Ability to triage results from automated code scanning tools for false positives and false negatives</li><li>Certifications such as GPEN, GXPN, GMOB, GWAPT, OSWE, OSCP, OSCE, OSWP,CNCF, AWS (Preferred) </li></ul>Submit a job applicationBy applying to the job, you acknowledge that you have read, understood and agreed to our Privacy Policy Notice (the “Notice”) and consent to the collection, use and/or disclosure of your personal data by Ninja Logistics Pte Ltd (the “Company”) for the purposes set out in the Notice. In the event that your job application or personal data was received from any third party pursuant to the purposes set out in the Notice, you warrant that such third party has been duly authorised by you to disclose your personal data to us for the purposes set out in the the Notice.

Singapore

Application Security Analyst

Apply to KALI Cyber Security Jobs in companies remotely and near you. New KALI Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Engineer at AppZen, Inc.	Full Time Audit Analyst Application Security Artificial Intelligence
Security Engineer - Red Team Penetration Testing at Veeva Systems	Android Application Security AWS Burp Suite C
Application Security Engineer. at Celonis	Application Security Automation Burp Suite C Checkmarx
Application Security Engineer at Celonis	Application Security Automation Burp Suite C Checkmarx
Application Security Analyst at Ninja Van	Application Security AWS Burp Suite Docker GPEN

KALI Cyber Security Jobs

0 KALI Cyber Security Jobs. Page 1 of 1

5 closed kali cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

KALI Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

KALI Cyber Security Jobs

0 KALI Cyber Security Jobs. Page 1 of 1

5 closed kali cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

KALI Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter