Application Security Engineer

Summary

The job is for a Security Team member at Crypto.com focusing on Application Security and DevSecOps. The role involves discovering security vulnerabilities, using automated tools, participating in agile scrum meetings, conducting secure coding training sessions, implementing various security control verification and risk detection systems, and providing support on application level security monitoring, intrusion detection, and incident response.

Requirements

• At least 5 years of software development experience. with a focus on either Server Side. Java or Rails language
• Experience in mobile application development will be an added advantage
• Good understanding of the whole software development lifecycle, CI/CD tools, cloud, Kubernetes, and various technology stacks

Responsibilities

• Discover security vulnerabilities through design review, manual source code review, and follow up on the remediation process
• Use automated tools to find security vulnerabilities in source code and/or system
• Participant in relevant agile scrum meetings and provide professional recommendations on the design of security controls, libraries, and/or protocols
• Conduct secure coding training sessions
• Implement various security control verification and risk detection by developing our own automation system
• Implement security related libraries for internal use
• Provide support on application level security monitoring, intrusion detection, and incident response

Preferred Qualifications

• CISSP, CSSLP, OSWE is definitely an advantage
• Familiar with OWASP Top 10 is an advantage
• Proficiency in both spoken and written English. Being able to speak Mandarin will be an advantage

Benefits

• Working in a well-organized team and be able to learn how to protect an Enterprise and ship secure applications at a fast pace
• New challenges every day, but still be able to enjoy work-life balance
• Have exposure to many cutting edge technologies in the industry
• Flexible working environment with adjustable work from home arrangements
• Competitive salary
• Medical insurance package with extended coverage to dependents
• Attractive annual leave entitlement including: birthday, work anniversary
• Work Flexibility Adoption. Flexi-work hour and hybrid or remote set-up
• Aspire career alternatives through us. Our internal mobility program can offer employees a diverse scope
• Work Perks: crypto.com visa card provided upon joining