5-7 years of hands-on experience in penetration testing and application security
Strong understanding of the OWASP Top 10 vulnerabilities
Proficient in fixing security issues in Java and API security testing
Experience with SAST/DAST tools like AppScan, Fortify, and Checkmarx
Ability to deliver secure coding training and manage bug bounty programs
Excellent communication skills for collaboration with engineering teams
Responsibilities
Participate in proactive security testing and reactive response efforts
Conduct periodic penetration tests and white-box assessments
Manage end-to-end CVE processes, including triage and impact analysis
Integrate security evaluations into the sales/vendor review lifecycle
Coordinate third-party application security assessments and ensure bugs are addressed
Perform threat modeling and design reviews for new products
Develop security automation for continuous validation and testing
Act as the first responder for customer security inquiries and incident management
Benefits
Collaborative work environment with cross-functional teams
Opportunity to influence security practices across the organization
Engagement in proactive security measures and continuous improvement
Access to the latest security tools and technologies
Professional development opportunities in security training and certifications
Full Job Description
Acceldata is hiring a Security Engineer focused on SOC operations and penetration testing. You will own the security of the Acceldata platform end-to-end: finding, classifying and fixing vulnerabilities. You will work closely with Product, Sales and Engineering to build and ship secure software.
What You'll Do
You will be part of a security team that spans proactive testing and reactive response, and you will need a working knowledge of SOC (Security Operations Centre) operations, real-time threat monitoring and response and how they complement proactive security efforts.
Run periodic penetration tests and white-box assessments to verify that security requirements have been met. Where possible, test before a product ramps.
Own end-to-end CVE management, including triage and impact analysis (confidentiality, integrity, availability). Ensure open-source dependency vulnerabilities are remediated and that monthly and quarterly patch releases carry the latest security fixes.
Partner across cross-functional teams to integrate thorough security and risk questionnaire evaluations into the sales/vendor review lifecycle.
Coordinate regular third-party application security assessments on Acceldata products. Make sure bugs are filed, fixed, and the results actioned.
Perform threat modelling and design reviews for products and features.
Build security automation for continuous validation, SAST and DAST.
Act as first responder for customer-facing security questions on CVEs, bug triage and incident management.
Partner with Product, Engineering and other teams, internal and external, to deliver secure software.
What You'll Bring
Hands-on, production experience in penetration testing, white-box testing, application security and vulnerability management
Strong command of the OWASP Top 10, and experience finding these issues in real applications
Experience fixing security issues in Java code and Experience with API security testing
Hands-on experience with AppScan, Fortify and Checkmarx (SAST/DAST tooling)
Experience delivering secure code training to developers and bug bounty programs
Strong communication skills and a collaborative approach with the engineering team
