What are the responsibilities and job description for the Product Security Engineer position at Ping Identity Career Center?
About Ping Identity:
At Ping Identity, we're changing the way people think about enterprise security technology. With our creative Identity Defined Security platform, we're building a borderless world where people have total freedom to work wherever and however they want. Without friction. Without fear.
We call this digital freedom. And it's not just something we provide our customers. It's something that inspires our company. People don't come here to join a culture that's built on digital freedom. They come to cultivate it.
We're headquartered in Denver, Colorado, and we have offices and employees around the globe. And we serve the largest, most demanding enterprises worldwide, including over half of the Fortune 100. Because even in the most complex enterprise environments, security shouldn't be a source of anxiety. It is one of your greatest competitive advantages.
As an Product Security Engineer working in our Tel Aviv office you will gain invaluable experience at a SaaS security software company. We ask that you have a passion for application security, the ability to work in a distributed and agile environment, you are attentive and have knowledge in the latest security best practices. You will report to the manager of IDaaS Application Security.
You Will:
- Oversee Security Engineering for the PingOne platform specializing in multifactor authentication, fraud and risk detection
- Help implement Secure Software Development Lifecycle (SSDLC) practices
- Work with the product teams to perform security design/code reviews and vulnerability assessment and management in a continuous integration and delivery (CI/CD) environments
- Perform security tasks including threat modeling, developer training, static code analysis, dynamic runtime fuzzing, and security use-case test development.
- Improve the automation of SSDLC tasks
- Assist the PreSales, Support and Customer Success teams responding to prospect, customer and field questions related to product and industry security
- Engage with third-party security consultants for independent security assessments, bug bounties and penetration testing of the product
