Senior Security Engineer at The Fountain Group

100% remote role
W2 Candidates only
Responsibilities

• Design and implement security best practices and standards across varied engineering teams and environments.
• Implement and conduct code reviews with a combination of static testing, manual reviews, and dynamic analysis / pen-testing.
• Conduct threat modeling, identify & drive risk decisions, and influence technical designs and architectures.
• Engage with developers to initiate and support remediation.
• Perform security reviews of new services and features.
• Build tools to simplify and automate Vulnerability Management processes.
• Provide engineering designs to mitigate security vulnerabilities in new software solutions.
• Design and implement tooling and automation for application security (e.g. SAST/DAST in CI/CD)
• Perform regular security testing as well as code reviews to improve software security.
• Maintain technical documentation related to software security.
• Ensure software security at all levels of architecture.

Requirements

• Bachelor's Degree in Computer Science, Engineering, Network Security, or related field with 10+ years related industry experience
• Industry certifications such as OSCP, CCSP, SSCP, CISSP
• Develop and implement advanced security techniques according to the technical architecture of the organization
• Perform regular application security testing as well as code reviews to improve software security.
• Well versed in Identity security issues and applications 
• Troubleshoot and debug issues as soon as they arise.
• Maintain technical documentation related to software security.
• Provide engineering solutions to mitigate security vulnerabilities in new software initiatives.
• Ensure software security at all levels of architecture.
• Continuous alignment with the latest tools and advanced industry practices for software security.