Sysdig, Inc.

Sysdig is driving the standard for securing the cloud and containers. We created Falco, the open standard for cloud-native threat detection, and consistently contribute to open source software projects.  We are passionate, technical problem-solvers, continually innovating and delivering powerful solutions to secure the cloud from source to run.
We value diversity and open dialog to spur ideas, working closely together to achieve goals. We’re an international company that understands how to cultivate a strong culture across a remote team. And we're a great place to work too — we've been named a Bay Area Best Place to Work by the San Francisco Business Times and the Silicon Valley Business Journalfor three years now! We were recognized by Deloitte as one of the 500 fastest growing organizations in 2020 and 2021. We are looking for team members who have a passion for container and cloud security and are willing to dig deeper to help our customers. Does this sound like the right place for you?
Your Opportunity
As a Security Engineer at Sysdig, you will be responsible for the day-to-day operation, maintenance, and monitoring of a wide variety of security tools and applications that support the overall Information Security program. This is a technical, hands-on position. You will help with infrastructure and application security, identity and access management, governance and controls and Sysdig’s overall security posture.
Your Responsibilities
<ul>
<li>Identify any potential security gaps in existing application infrastructure and work with appropriate stakeholders for remediation </li>
<li>Operate our key security tools and constantly tune and build automated response playbooks</li>
<li>Defines security configurations for endpoint, network, e-mail security, etc.</li>
<li>Designs automated workflows to streamline security operations</li>
<li>Analyzes and estimates feasibility, costs, time, and work effort needed to design and implement moderately complex technical solutions.</li>
<li>Monitors and proactively manages supported products and services to assure their performance, availability, security, and capacity.</li>
<li>Researches, analyzes, and formulates recommendations regarding technologies, products, and solutions to fulfill requirements within the enterprise.</li>
<li>Perform due diligence in ensuring that appropriate technology solutions are chosen to facilitate security at the application level </li>
</ul>
Your Background
<ul>
<li>Bachelors in Computer Science or a related field, or equivalent working experience </li>
<li>Solid experience in a security engineering role </li>
<li>Experience deploying and managing various security technologies including AV, network security, e-mail security, SIEM</li>
<li>Expertise applying security principles to cloud native environments (AWS, containerization, and microservices)</li>
<li>Knowledge of enterprise logging, with a focus on security event logging.</li>
<li>Strong understanding of security operations concepts</li>
<li>Proven expertise with networking protocols</li>
<li>Experience with automation and CI/CD tools such as Terraform and GitHub </li>
<li>Experience with user/customer identity management, authentication and authorization frameworks</li>
<li>Scripting experience in the following: Terraform, CloudFormation, Python, PowerShell, Perl, Bash, SQL Scripting, Java</li>
</ul>
Key Technologies
<ul>
<li>Amazon Web Services (AWS)</li>
<li>Kubernetes</li>
<li>Terraform</li>
<li>Java</li>
<li>Go</li>
<li>Linux</li>
<li>SonarQube</li>
</ul>
Why work at Sysdig?
<ul>
<li>We’re a well-funded startup that already has a large enterprise customer base</li>
<li>We have a pragmatic, approachable culture, from the CEO down</li>
<li>We have an organizational focus on delivering value to customers</li>
<li>Our open-source tools (<a href="https://sysdig.com/opensource/" rel="noopener noreferrer nofollow ugc" target="_blank">https://sysdig.com/opensource/</a>) are widely used and loved by technologists &amp; developers</li>
</ul>
When you join Sysdig, you can expect:
<ul>
<li>Competitive compensation including equity opportunities</li>
<li>Flexible hours and additional recharge days</li>
<li>Mental wellbeing support through Modern Health for you and your family</li>
<li>Monthly wellness reimbursement</li>
<li>Career growth</li>
</ul>
Some of our Hiring Managers are globally distributed, an English version of your most up to date Cv will be highly appreciated!

Spain

Security Ops Engineer (Spain-Remote)

Italy

Security Ops Engineer (Italy-Remote)

Span.IO, Inc.

<h3>Our Mission  </h3>
SPAN develops products that accelerate the rapid adoption of renewable energy in the home. The flagship SPAN Smart Panel is the first true evolution for the traditional home electric panel, harnessing enhanced technology for metering, monitoring, and control. An expanded product suite of intelligent, integrated solutions radically lowers the cost and complexity of energy upgrades–including solar, batteries and EVs–empowering homeowners to be active, resilient and informed players in the energy market. 

The Role
We are looking for a hands-on individual with a white hat hacker mindset to join us in an Application Security Lead Role as part of the Security &amp; IT team at Span. You will be responsible for building out Span’s application security program and architecting, developing and deploying application security tools and technologies to protect Span's platform and backend infrastructure. Responsibilities include:

<ul>
<li>Develop the secure SDLC process at Span andperform static security code analysis (SAST) of Span's code base on a regular basis and provide relevant recommendations to Span's developers.</li>
<li>Perform dynamic application security testing (DAST) using open source and commercial tools before applications are deployed in production.</li>
<li>Perform threat modeling on existing and upcoming feature sets in the Span applications so that appropriate security controls can be built from the ground up.</li>
<li>Review security alerts and reports on a daily basis and work closely with the DevOps team in any follow up investigation or remediation.</li>
<li>Manage the bug bounty program at Span and work with the developers for timely remediation of the reported issues.</li>
<li>Manage external independent Application Security Testing and ensure timely remediation of issues.</li>
<li>Identify all vulnerabilities originating from third party dependencies and ensure timely remediation.</li>
<li>Impart ongoing secure code and application security best practices training to developers.</li>
</ul>

About You 
We are seeking an Application Security Lead who has:
<ul>
<li>Bachelors in Computer Science or related field</li>
<li>5+ years in a security engineering or operations role</li>
<li>Strong knowledge of applied cryptography, web security, TLS/SSL, web authentication protocols such as OAuth/SAML</li>
<li>Experience in using scripting languages e.g. Python, Perl, PHP, Ruby to automate tasks and manipulate data</li>
<li>Experience with developing threat models (STRIDE, DREAD, etc.)</li>
<li>Comfortable with security tools like Burp Suite, OWASP ZAP, CheckMarx, Veracode, MetaSploit, App Spider etc.</li>
<li>Experience with automation tools like Ansible, Chef, Puppet, Jenkins desired but not a must have</li>
<li>Experience with automated application testing tools/frameworks e.g. Selenium, SonarQube</li>
<li>Experience with Web Application Firewalls (WAF) desired but not a must have</li>
</ul>

<h3>Life at SPAN</h3>
SPAN embraces diversity and equal opportunity in a serious way. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. 
Headquartered in San Francisco’s vibrant SoMa neighborhood, we are an eclectic group of creative thinkers who value open communication, teamwork, and a ‘make it happen’ approach to addressing complex challenges. 
Our CEO, Arch Rao⁠—former head of the Tesla Powerwall team⁠—fosters an energetic and collaborative environment, with a strong emphasis on maintaining work-life-balance across the organization.
We’re hiring talented individuals who are driven by success and are passionate about shaping the future of renewable energy. If that sounds like you, we’d love for you to consider joining the rapidly growing team at SPAN.
The Perks:
⚡ Competitive compensation + equity grants at a well-funded, venture-backed company
⚡ Comprehensive benefits (including medical; dental, vision, life and disability insurance)
⚡ Comfortable, sunny office space located near BART and Caltrain public transit
⚡ Strong focus on teambuilding and company culture (events, meet-ups, clubs)
⚡ Flexible hours and unlimited PTO
Our Mission &amp; Values:
At SPAN, we believe that powering your home with clean energy should be a simple and delightful experience that is at its essence human-centered and technology-forward.
Our core values include:
<ul>
<li>Making home energy more accessible, intuitive, and convenient.</li>
<li>Enabling homes and vehicles to be powered by the sun.</li>
<li>Building resilient homes with reliable power.</li>
<li>All-electric everything.</li>
<li>A more flexible &amp; distributed grid.</li>
</ul>
Interested in joining our team? Submit an application today and we’ll be in touch with next steps!

San Francisco

Application Security Lead

Sigma Defense

Sigma Defense Systems is a leading technology company serving the Department of Defense (DoD), providing tactical communications systems and services for digital modernization since 2006. Through our acquisitions of SOLUTE in January 2022 and Sub U Systems in May 2022, we have expanded our software and communications hardware solutions to better support JADC2, C5ISR, SATCOM, and DEVSECOPS for customers in the Army, Navy, Air Force, Marine Corps, and Space Force. Through a combination of hardware, software, and industry expertise, we provide a complete portfolio of solutions and services that accelerates information collection and sharing for faster decision making and better mission outcomes.We are a company of innovative professionals thriving in a highly motivating work environment that fosters creativity and independent thinking. If you are a motivated individual with a desire to support our service men and women, now is a great time to join Sigma Defense! We are seeing a DevSecOps Engineer, Mid to join our team! This is a hybrid position working some on-site in San Diego and some remote. Essential Job Responsibilities(not all-inclusive) <ul> <li>Provide leadership in the DevSecOps areas of Vulnerability Scanning, Certificate Management, Password Policy Management, and Data Analysis of security monitoring outputs </li> <li>Coordinate daily Security and Compliance efforts </li> <li>Assist in developing an automated security framework for robust deployment tools and Develop software and the artifacts associated with software development </li> <li>Implement high level designs in robust maintainable software processes </li> <li>Work as a team throughout the design process, supporting sprint planning sessions, code reviews, and scrums </li> <li>Create modules, install software on target nodes, and deploy configuration files </li> <li>Develop and implement test scripts </li> <li>Support functional and system level testing </li> <li>Work closely with the operational Project Management team to maintain successful development sprints and stay on schedule </li> <li>Utilize Jenkins and GitLab CI pipelines, SonarQube, Nexus, Ansible, Docker, RPM package management solutions, build tools, and code metrics in support of our DevOps environment</li> </ul>Requirements<ul> <li>B.S. in an engineering field (Computer, Software, Math, Physics, Electrical, etc.) </li> <li> 5 years of experience in software development or DevSecOps </li> <li>2 years of hands-on experience writing and deploying C++ 11 (or greater) for complex systems and processes </li> <li>Hands-on experience with Python, Bash, CMake, and Web (node.js/React) </li> <li>Solid Linux OS knowledge: CentOS/RHEL, RPM, UNIX build process </li> <li>Experience with Jenkins and Gitlab CI/CD </li> <li>Experience integrating static code analysis, SAST, and code metrics tooling </li> <li>Familiarity with agile development process </li> <li>Ability to obtain US Secret clearance</li> </ul>Benefits<ul> <li>Medical, Dental and Vision</li> <li>Life and A&amp;D coverage</li> <li>Employee Assistance Program (EAP)</li> <li>401(k) plan with company matching contributions</li> <li>Paid Time Off (PTO) &amp; 10 paid Holidays</li> <li>Educational Assistance</li> <li>Highly Competitive Salary</li> </ul> We are an equal opportunity employer. All applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, marital status, veteran status, or any other applicable legally protected status or characteristic.

San Diego

DevSecOps Engineer, Mid-level

Coupa Software, Inc.

Coupa Software (NASDAQ: COUP), a leader in business spend management (BSM), has been certified as a “Great Place to Work” by the <a href="https://www.greatplacetowork.com/certified-company/7003229" rel="noopener noreferrer nofollow ugc" target="_blank">Great Place to Work</a> organization. We deliver “Value as a Service” by helping our customers maximize their spend under management, achieve significant cost savings and drive profitability. Coupa provides a unified, cloud-based spend management platform that connects hundreds of organizations representing the Americas, EMEA, and APAC with millions of suppliers globally. The Coupa platform provides greater visibility into and control over how companies spend money. Customers – small, medium and large – have used the Coupa platform to bring billions of dollars in cumulative spend under management. Learn more at <a href="http://cts.businesswire.com/ct/CT?id=smartlink&amp;url=http%3A%2F%2Fwww.coupa.com&amp;esheet=51114752&amp;newsitemid=20150601006470&amp;lan=en-US&amp;anchor=www.coupa.com&amp;index=2&amp;md5=a987f008a6f03bd98fccc16218fcd14a" rel="noopener noreferrer nofollow ugc" target="_blank">www.coupa.com</a>. Read more on the <a href="http://cts.businesswire.com/ct/CT?id=smartlink&amp;url=http%3A%2F%2Fwww.coupa.com%2Fblog%2F&amp;esheet=51114752&amp;newsitemid=20150601006470&amp;lan=en-US&amp;anchor=Coupa+Blog&amp;index=3&amp;md5=eb22c8026e1b468cb5d98c71dc16baf3" rel="noopener noreferrer nofollow ugc" target="_blank">Coupa Blog</a> or follow <a href="http://cts.businesswire.com/ct/CT?id=smartlink&amp;url=https%3A%2F%2Ftwitter.com%2Fcoupa&amp;esheet=51114752&amp;newsitemid=20150601006470&amp;lan=en-US&amp;anchor=%40Coupa+on+Twitter&amp;index=4&amp;md5=a8a25a82b02e70c890f812b09eb87a15" rel="noopener noreferrer nofollow ugc" target="_blank">@Coupa on Twitter</a>.Do you want to work for Coupa Software, the world's leading provider of cloud-based spend management solutions? We’re a company that had a successful IPO in October 2016 (NASDAQ: COUP) to fuel our innovation and growth. At Coupa, we’re building a great company that is laser focused on three core values:1. Ensure Customer Success – Obsessive and unwavering commitment to making customers successful.2. Focus On Results – Relentless focus on delivering results through innovation and a bias for action.3. Strive For Excellence – Commitment to a collaborative environment infused with professionalism, integrity, passion, and accountability.
<h3>Responsibilities:</h3>
<ul>
<li>Build models of threats based on data analysis, CVEs, vendor and discovered threats and exploits</li><li>* Actively seek out and develop action plans to resolve threats</li><li>Participate as a senior security engineer as an escalation point for security related events including: incidents, vulnerabilities, and compliance related controls within Coupa’s cloud based production services and platform</li><li>Collaborate with Engineering and Operations teams to address security related issues</li><li>Monitor and analyze security data to ensure we maintain and exceed key performance indicators</li><li>Troubleshoot and document security incidents, with an eye to increasing our threat modeling fidelity and to proactively find and eliminate threats</li><li>Conduct security risk assessments on behalf of internal and external customers providing consistent technical measurements of risk</li><li>Produce and present security reports for Coupa functional teams and leadership</li><li>Automation of security assessments and other security related SecOps tasks</li><li>Resolve security issues from assessments and other sources and deliver upon assigned security projects</li><li>Implement and maintain security solutions to detect and prevent security related risks including, but not limited to: firewalls, hids/fim, workload protection, antivirus, sast/dast, application security, single sign-on, and custom tools</li><li>Contribute to Coupa’s security strategy</li><li>Advocate Security best practices throughout Coupa</li><li>Define and iterate upon best security practices</li><li>Participate in Security Incident On-call rotation</li></ul>
<h3>Requirements:</h3>
<ul>
<li>5+ years of experience in an equivalent security related role</li><li>* At least 2 years' experience with threat modeling and threat hunting</li><li>Strong experience in web application security eg (XSS, CSRF, SQL injection)</li><li>Familiarity with Cloud Computing and Software as a Service</li><li>Hands-on operational experience with security tools such as Palo Alto Twistlock, Prisma Cloud, file integrity monitoring, firewalls, antivirus, Sonarqube, application security, Kibana, SSEC, Rapid7, BurpSuite, Nmap and SSO</li><li>2+ years of experience with automation using Java, Perl, PHP, Python, Ruby or equivalent</li><li>Strong communication skills; both written and oral</li><li>Ability to work in a team environment</li><li>Experience with designing and/or delivering tools</li><li>Software or systems development experience a plus</li><li>Infrastructure delivery experience a plus</li></ul>At Coupa, we have a strong and innovative team dedicated to improving the spend management processes of today’s dynamic businesses. It’s our people who make it happen, and we strive to attract and retain the best in every discipline.We take care of our employees every way we can, with competitive compensation packages, as well as restricted stock units, an Employee Stock Purchase Program (ESPP), comprehensive health benefits for employees and their families, retirement and savings plans with employer match, a flexible work environment, no limit vacations for exempt employees, non-exempt employees are on an accrual basis for PTO, catered lunches…And much more!As part of our dedication to the diversity of our workforce, Coupa is committed to Equal Employment Opportunity without regard for race, ethnicity, gender, protected veteran status, disability, sexual orientation, gender identity or religion.Please be advised, inquiries or resumes from recruiters will not be accepted.

Pune

Sr. Security Engineer - threat hunting

Apply to Sonarqube Cyber Security Jobs in companies remotely and near you. New Sonarqube Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Ops Engineer (Spain-Remote) at Sysdig, Inc.	Application Security Automation AWS BASH Cloud
Security Ops Engineer (Italy-Remote) at Sysdig, Inc.	Application Security Automation AWS BASH Cloud
Application Security Lead at Span.IO, Inc.	Ansible Application Security Automation Burp Suite Checkmarx
DevSecOps Engineer, Mid-level at Sigma Defense	Agile Ansible BASH C Clearance
Sr. Security Engineer - threat hunting at Coupa Software, Inc.	Application Security Automation Burpsuite DAST Exploits

Sonarqube Cyber Security Jobs

0 Sonarqube Cyber Security Jobs. Page 1 of 1

5 closed sonarqube cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Sonarqube Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Sonarqube Cyber Security Jobs

0 Sonarqube Cyber Security Jobs. Page 1 of 1

5 closed sonarqube cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Sonarqube Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter