Trace3

Who is Trace3?
Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.
Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!
Trace3 is headquartered in Irvine, California. We employ more than 1000 people all over the United States. Our major field office locations include Atlanta, Denver, Detroit, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, San Diego, San Francisco, and Scottsdale.  
Ready to discover the possibilities that live in technology?

Come Join Us!
Street-Smart - Thriving in Dynamic Times
We are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.
Juice - The “Stuff” it takes to be a Needle Mover 
We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.
Teamwork - Humble, Hungry and Smart
We are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures – not just their success. We appreciate the individuality of the people around us.

About the Role:
Trace3 is looking for an experienced Application Security Professional to join our fast-growing DevSecOps consulting practice to help our customers in evaluating and implementing application security solutions.  This is a hybrid role where you will be spending some of your time in a presales capacity as the hands on solutions expert to support our sales teams to prospect, influence, architect, and scope application security solutions to our customers.  You will help develop application security sales and technical training collaterals for customers and our internal sales teams.  You will conduct research and market analysis of leading application security solution platforms as well as lab testing them to validate coverage and evaluate efficacy.  You will also assist our sales teams to understand client’s business goals and technical requirements to rationalize the appropriate application security solutions for their use cases. 

You will also spend time being responsible for delivering application security services and advise our customers on secure software development.  This includes planning and leading the implementation and adoption of application security platform solutions, reviewing customer software architecture and source code, provide training for developers and management, and drive solutions adoption across multiple development teams. 
What You’ll Do:
<ul>
<li>Lead presales engagements as the Application Security subject matter expert to Trace3 customers and sales teams nationally</li>
<li>Work closely with our sales teams throughout the sales process to ensure all the client’s technical needs are understood and met with the best possible solution options</li>
<li>Drive technical relationships with all stakeholders and support sales opportunities</li>
<li>Present at client facing and industry events as the SME in application security</li>
<li>Conduct research analysis and lab testing of application security solutions to evaluate efficacy, use cases coverage, and fit-for-purpose</li>
<li>Build and maintain application security vendor partner relationships</li>
<li>Contribute to the development of both customer facing and internal facing presales collaterals</li>
<li>Contribute to the development of service offering collaterals and service delivery documentations that we can take to market with selected application security solutions</li>
<li>Champion Agile and DevOps leading-practices, processes, design patterns, and tools in support of DevSecOps transformation</li>
<li>Assist in services opportunity generation, technical scoping, and Statements of Work (SOW) writing</li>
<li>Assist in the delivery of application security services</li>
<li>Promote DevSecOps culture to our customers</li>
<li>Drive adoption of application security tools and DevSecOps practices as part of customer’s transformation</li>
</ul>
Qualifications &amp; Interests:
<ul>
<li>At least 5 years of Development Experience in any programming language</li>
<li>Minimum of 8 years of combined hands-on experience as a software engineer, DevOps engineer, and/or Application Security engineer</li>
<li>Previous experience working as a Sales Engineer or Solutions Architect working with application security software products or services</li>
<li>Ability to assess customer requirements, identify business problems, and demonstrate proposed solutions</li>
<li>Programming and scripting proficiency – minimum of two: C#, Java, Typescript, Javascript, Bash, Python, Go</li>
<li>Experience with various application security tools including SAST, SCA, IAST, DAST, API Security, WAF, and RASP</li>
<li>Experience integrating and operating commercial application security solutions (SAST/SCA/DAST/IAST) such as Veracode, Checkmarx, Synopsys, WhiteSource, Snyk, Invicti – Accunetix or Netsparker, Contrast Security</li>
<li>Prior experience working at an application security vendor – bonus points</li>
<li>Experience building secure software based on frameworks such as OWASP SAMM, ASVS, MASVS, CWE, SANS, BSIMM.</li>
<li>Experience in implementing and integrating security tools into CI/CD</li>
<li>Experience with Agile methodologies such as Scrum and Kanban</li>
<li>Knowledge of developer tools and environments, project management and bug tracking systems</li>
<li>Understanding of cloud native development patterns and microservices architecture</li>
</ul>
BONUS QUALIFICATIONS:

<ul>
<li>Experience with Mobile Application Security solutions and practices</li>
<li>Experience with cloud security posture management and cloud workload protection platform solutions such as (Aqua Security, Palo Alto Prisma Cloud, Sysdig, Lacework, Orca Security, Wiz)</li>
<li>Experience with Infrastructure as Code Security solutions such as Bridgecrew, Snyk, and Fugue</li>
<li>Understanding of service-oriented architecture (REST APIs, micro-services, etc) and security best practices</li>
<li>DevOps and Architecture experience and certifications with one of the major public cloud providers (AWS, Azure, Google Cloud)</li>
<li>Experience with securing containers, kubernetes, and AWS Lambda functions</li>
<li>Experience conducting secure coding training and implementing security champions program</li>
<li>Experience conducting threat modeling and application penetration testing</li>
<li>Prior consulting experience is a plus</li>
<li>Must have excellent interpersonal skills, a high degree of professionalism and the ability to design technology solutions for commercial and large enterprise companies</li>
<li>Excellent presentation, communication, and writing skills required</li>
</ul>
The Perks:
<ul>
<li>Comprehensive medical, dental and vision plans for you and your dependents</li>
<li>401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability</li>
<li>Competitive Compensation</li>
<li>Training and development programs</li>
<li>Stocked kitchen with snacks and beverages</li>
<li>Collaborative and cool office culture</li>
<li>Work-life balance and generous paid time off</li>
</ul>
***To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.

New York

Application Security Solutions Architect | Solutioning/Research/Implementation (Remote)

Tide

About You 
As a Application Security Engineer you will be passionate about security and secure application design. You will love helping engineers create more secure web and mobile applications.
You will be comfortable explaining security issues and concerns to both product owners and engineers and love the feeling you get when this results in them releasing a more resilient product.
You will be a keen proponent of using automation in software build and deployment pipelines to ensure that any new release is tested for security bugs and bug classes before it hits production.
You will be a keen follower of all things Infosec and constantly be on the lookout for ways to apply new industry trends and tools to your day to day role.
Some of the things you’ll be doing: 
<ul>
<li>Performing application security design evaluations and code reviews, and providing subject matter expertise around these topics</li>
<li>Owning and defining Tide’s threat modelling methodology, and embedding this across Tide’s engineering community</li>
<li>Owning and nurturing the relationship between Information Security and Engineering, and developing good working practices between the two teams</li>
<li>Improving Tide’s engineering standards in line with industry best practices by embedding a secure by default approach into all stages of the development lifecycle</li>
<li>Evaluating, implementing and managing 3rd party application security tools that complement Tide’s existing technology stack</li>
<li>Developing a repository of tailored application security training content for consumption by Tide’s engineering community</li>
<li>Balancing information security risk with product feature advancement, and incorporating the use of best-practice risk management methodology within the development process</li>
</ul>
What you’ll get in return:
<ul>
<li>Competitive salary </li>
<li>Vitality Health Insurance, with a proactive focus on mental and physical wellbeing</li>
<li>Hundreds of perks and discounts through Vitality Health Insurance (fitness watches, Waitrose cashback, gym membership etc.)</li>
<li>24/7 Employee Assistance Programme</li>
<li>25 days holiday with the ability to buy extra days</li>
<li>We invest in your development with a £1,000 professional L&amp;D budget per year and ability to access thousands of resources through the Learnerbly platform</li>
<li>Referral bonus when you bring your friends to join Tide </li>
<li>Access to ‘salary sacrifice’ benefits such as Cycle to Work scheme and pension contribution</li>
<li>Spacious brand new office in Liverpool street with an all-day snacks bar</li>
<li>Enhanced family-friendly leave</li>
<li>24 hours paid volunteering or L&amp;D time off per year</li>
<li>Flexible work from home or at the office arrangements</li>
<li>Monthly team socials (we’ve had themed bingo, online cocktail-making sessions, wellbeing challenges and themed virtual pub quizzes)</li>
<li>Stock options</li>
</ul>
You’ll be a great fit if: 
<ul>
<li>You have software engineering experience in an agile environment</li>
<li>You are able to intuitively find flaws in software and can effectively communicate how to fix them</li>
<li>You have the ability to think like an attacker and use that context to develop threat models</li>
<li>You can enable other engineering teams to find flaws before they are introduced into production</li>
<li>You have technical knowledge in one of the following: cloud security, web application security, mobile security</li>
<li>You have knowledge of secure coding and best practices</li>
<li>You have a hands-on attitude and the ability to drive solutions to completion</li>
<li>You have experience with OWASP frameworks, static &amp; dynamic analysis, and common exploitation methods</li>
<li>You may have knowledge of OWASP SAMM</li>
<li>You may have experience working within the Fintech sector</li>
<li>You may have worked within a fast scaling business</li>
<li>You may have familiarity with fuzzing as a way to find bugs</li>
</ul>
 Who are Tide?
We’re the UK’s leading provider of smart current accounts for sole traders and small companies. We’re also on a mission to save business owners time and money on their banking and finance admin so they can get back to doing what they love - for too long, these customers have been under-served by the big banks.
Our offices are in London, UK, Sofia, Bulgaria, Hyderabad and Gurugram, India, where our teams are dedicated to our small business members, revolutionizing business banking for SMEs. We are also the leading provider of UK SME business accounts and one of the fastest-growing fintechs in the UK.
We’re scaling at speed with a focus on hiring talented individuals with a growth mindset and ownership mentality, who are able to juggle multiple and sometimes changing priorities. Our values show our commitment to working as one team, working collaboratively to take action and deliver results. Member first, we are passionate about our members and put them first. We are data-driven, we make decisions, creating insight using data.
We’re also one of LinkedIn’s top 10 hottest UK companies to work for.
Here’s what we think about diversity and inclusion…
We build our services for all types of small business owners. We aim to be as diverse as our members so we hire people from a variety of backgrounds. We’re proud that our diversity not only reflects our multicultural society but that this breadth of experience makes us awesome at solving problems. Everyone here has a voice and you’ll be able to make a difference. If you share our values and want to help small businesses, you’ll make an amazing Tidean.
A note on the future of work at Tide:
Tide’s offices are beginning to open for Tideans to return on a voluntary basis. Timelines for reopening will be unique for each region and will be based on region-specific guidelines. The health and well-being of Tideans and candidates is our primary concern, therefore, for the foreseeable future, we have transitioned all interviews and onboarding to be conducted via Zoom.
Once offices are fully open, Tideans will be able to choose to work from the office or remotely, with the requirement that they visit the office or participate in face-to-face team activities several times per month.
#LI-SJ1

London

Application Security Engineer - II

Product Security Engineer - II

Mattermost

Mattermost is an open source platform for secure collaboration across the entire software development lifecycle. Hundreds of thousands of developers around the globe trust Mattermost to increase their productivity by bringing together team communication, task and project management, and workflow orchestration into a unified platform for agile software development. Founded in 2016, Mattermost’s open source platform powers over 800,000 workspaces worldwide with the support of over 4,000 contributors from across the developer community. The company serves over 800 customers, including European Parliament, NASA, Nasdaq, Samsung, SAP, United States Air Force and Wealthfront, and is backed by world-class investors including Battery Ventures, Redpoint, S28 Capital, YC Continuity. To learn more, visit <a href="http://www.mattermost.com" rel="noopener noreferrer nofollow ugc" target="_blank">www.mattermost.com</a>.We value high impact work, ownership, self-awareness and being focused on customer success. If these values match who you are, we hope you'll learn more about <a href="https://handbook.mattermost.com/company/about-mattermost" rel="noopener noreferrer nofollow ugc" target="_blank">working at Mattermost</a> and apply!Mattermost is seeking a result-driven and analytical Lead Product Security Engineer to help ensure the security of our product and services across the company. As leader of our Product Security team you will work closely with a globally distributed team to support in all the different aspects of the software development life cycle. You will be responsible for the implementation of additional application security tooling and/or processes across the company and coordinate with relevant stakeholders, gather requirements, and lead the implementation.
<h3>Responsibilities:</h3>
<ul>
<li>Manage a globally distributed team of security engineers</li><li>Ownership of vulnerability management and mitigation approaches</li><li>Manage and lead security projects to increase security posture of products and company</li><li>Support threat modeling of in-house developed software components</li><li>Conduct application security reviews through manual code review or static/dynamic code analysis</li><li>Architecture and review of security components</li><li>Provide security training and outreach to internal development teams</li><li>Develop security guidance documentation</li><li>Support the development of our application security program</li><li>Maintain and grow our bug bounty program</li></ul>
<h3>Required Background/Skills:</h3>
<ul>
<li>Bachelor's degree in Computer Science or related fields, or significant professional application security experience</li><li>5+ years of demonstrated experience in product security, security research and/or secure software development</li><li>Familiarity with common security libraries, security controls, and common security flaws </li><li>Experience with static/dynamic analysis, and common exploit tools and methods</li><li>Experience in one or more programming languages, ideally Go or Javascript</li><li>Comfortable with using Git</li><li>Excellent written and verbal communication skills</li><li>Demonstrable teamwork skills and resourcefulness</li><li>Linux experience</li></ul>
<h3>Preferred Background/Skills:</h3>
<ul>
<li>Experience working in open source communities</li><li>Experience with OWASP SAMM or other security assessment standards</li><li>Certifications in the domain of penetration testing, or application security (e.g. OSCP, OSWE, GWAPT, …)</li><li>Experience with Kubernetes / Docker</li><li>Experience working in open source communities</li><li>Participation in Bug Bounties, CTFs or similar activities</li></ul>Mattermost is a remote-first company with staff living and working across the globe. We are currently hiring staff in these countries/regions:Australia - Bangladesh - Belarus - Brazil - Bulgaria - Canada - Chile - Colombia - Finland - Georgia - Germany - Greece - India - Ireland - Mauritius - Mexico - Norway - Pakistan - Philippines - Poland - Portugal - Spain - South Korea - Suriname - Turkey - Uganda - Ukraine - United Kingdom - United StatesWe are constantly working towards adding more countries/regions to this list, but first we need to make sure we are compliant with local laws and regulations, which takes time. Mattermost is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people from all walks of life. We don't discriminate against staff or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!

Berlin

Lead Application Security Engineer - Remote

Back Market

Back Market is the #1 marketplace for refurbished electronic devices in Europe and in the US, leading the way in a shift towards a circular economy, freeing the planet from electronic waste. We are proud to sabotage ‘new’ by connecting highly certified professionals to consumers who are looking for a more affordable, reliable and an ecological alternative to purchasing brand new products.  Back Market is undergoing meteoric growth and has raised over 884M€ already! We have the objective of reaching 1000 Back Makers by the end of 2022! We are thrilled to have an inclusive, fulfilling and caring work environment in all our offices (Paris, Bordeaux, Berlin, Barcelona &amp; New-York). This is an opportunity for you to join a talented, humble and passionate team at the heart of innovation : the <a href="https://medium.com/back-market-engineering" rel="noopener noreferrer nofollow ugc" target="_blank">Bureau Of Technology</a>Be a part of the movement. Join the refurb revolution. As a Senior Security Engineer - GRC (Governance, Risks, and Compliance) preserving Back Market's information assets is your main concern. You contribute to the continuous improvement of the company's security posture, while keeping an eye on key risk indicators. As a domain expert and evangelist of cybersecurity best practices you share your time between advising technical and business teams, assessing risks, defining and maintaining security policies, procedures and action plans, performing audits and reviews, and monitoring compliance progress.We have huge ambitions and aim for excellence. So we are counting on you to support and advise our teams on the cybersecurity aspects of these challenges.
<h3>Required profile :</h3>
<ul>
<li>You are a talented engineer with at least 4 years experience of securing web services in dynamic cloud environments.</li><li>You believe in the importance of a risk-based approach to define and maintain security objectives, policies, procedures and action plans necessary for succeeding in your mission.</li><li>You care about explaining the rationales for the company's security choices, to ensure that colleagues understand and adopt them, and defining a security requirement without any analysis or foundation is nonsense to you.</li><li>Best practices and standards such as the ISO/IEC 27000 series, including 27005 or EBIOS, 27017, 27018, 27035, OWASP SAMM, OWASP ASVS or CSVS, or CIS benchmarks are among your favorite references.</li><li>You are curious, structured and enjoy exploring new methods and technologies. You are transparent in your communication and are able to find solutions with your team when you don't have an answer.</li><li>You like to share knowledge and make your colleagues aware of good cybersecurity practices, by supporting your proposals with concrete examples and demonstrations.</li><li>Your skills are recognized by a certification such as (ISC)² CISSP, CCSP or CSSLP, ISO 27001 Lead Implementer or Auditor, EBIOS Risk Manager, SANS GCCC - or you are ready to obtain it in the near future.</li><li>In-depth knowledge of PCI-DSS and GDPR would be appreciated.</li><li>You want to join a challenging technical environment: AWS, GCP, Kubernetes, Terraform, Datadog, Spinnaker, Cloudflare, etc., where you can learn, develop and grow your career.</li><li>Great verbal and written communication skills, in English.</li></ul>Recruitment process : * Call with Yann one of our tech talent acquisition specialist* Technical interview with members of the Cybersecurity team* Team Fit interview with your Manager and one of your potential future coworker* Interview with Thibaud our CEO and Co-founderWHY SHOULD YOU JOIN US ?• A meaningful job: through hard work, you will help avoid thousands of tons of electronic waste and fight against planned obsolescence. It counts!• An attractive salary, equity, multiple benefits (meal tickets, health insurance, etc...), parental benefits, #remote friendly company, relocation package, internal events, etc… • Technical challenges all day every day: you will have the freedom to innovate and adopt new ideas!• Work with passionate experts who will share their knowledge and help you develop and grow! (Backademy, technical guilds, Meet-up &amp; Conference) • Grow your career with a flexible career path, BackMarket can help you evolve!• A booming scale-up: our environment is rapidly growing in Europe, the USA and soon in Asia!• A lot of fun: you will have the opportunity to work in a fast-paced, open-minded and friendly environment.BackMarket is an Equal Opportunity Employer for any minority, disability, gender identity or sexual orientation.

Barcelona

Senior Security Engineer - GRC - Open to remote

Apply to SAMM Cyber Security Jobs in companies remotely and near you. New SAMM Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Application Security Solutions Architect \| Solutioning/Research/Implementation (Remote) at Trace3	Remote Full Time Devsecops Consulting Javascript
Application Security Engineer - II at Tide	Agile Application Security Automation Banking Finance
Product Security Engineer - II at Tide	Agile Application Security Automation Banking Finance
Lead Application Security Engineer - Remote at Mattermost	Agile Application Security Code Analysis Docker Exploit
Senior Security Engineer - GRC - Open to remote at Back Market	Audits AWS CCSP Cissp Cloudflare

SAMM Cyber Security Jobs

0 SAMM Cyber Security Jobs. Page 1 of 1

5 closed samm cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

SAMM Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

SAMM Cyber Security Jobs

0 SAMM Cyber Security Jobs. Page 1 of 1

5 closed samm cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

SAMM Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter