What are the responsibilities and job description for the Application Security Engineer (Pen Testing) position at Clearwater Analytics?
Job Summary :
Responsible for working with Clearwater Analytics development teams to ensure security is injected into the software development lifecycle and products are secure. This role will focus on validating secure coding practices, penetration testing and ownership over application security vulnerability management.
Responsibilities :
- Engage in reviews of applications security, including code review as well as dynamic and manual penetration testing of products.
- Ongoing facilitation of application vulnerability management
- Advise and support development teams in the area of application security
- Ability to suggest improvements to existing processes / tooling.
- Demonstrate professional application of information security, compliance, assurance and / or other security practices and principles.
- Up to date on evolving threats and security vulnerabilities
- Ability to assess risk based on a given risk assessment framework
- Actively seeks out opportunities to improve key systems, does not need to be directed on a daily basis.
- Can help organize a group and coordinate projects or penetration test engagement.
- Assists in definition, documentation, and evolution of best practices for application security program
- Goes above and beyond basic requirements to support their own team and others.
- Helps to identify key gaps in security and tooling functionality that will drive significant improvement in application security
- Has the ability to take an assignment, project or problem and define, lead and implement a solution to completion.
Requirements :
Desired Experience or Skills :