Remote Senior Application Security Engineer I

Summary

Join our team as a Senior Application Security Engineer-I to partner with development teams and ensure the security and compliance of our products. You will apply secure coding best practices, perform security reviews, and lead threat modeling exercises.

Requirements

• B.S. or M.S. Computer Sciences or related discipline
• Passion for Security : You care about the craft of software security, understand the various ways in which a system may be vulnerable, and know how to apply best practices to defend against attackers using industry standards and frameworks
• Operations Mindset: You understand how to leverage encryption, key management, monitoring, alerting, and automation to secure at scale while ensuring uptime
• 4-6 years of professional experience in applied software security roles
• Strong in OWASP top 10 security vulnerabilities, identifying security flaws in software, scoring the impact, and proposing a solution for developers
• Experience leveraging cloud security tools as part of software architecture
• Operational expertise in high scale, reliable 24/7, multi-tenant SaaS
• Strong coding and debugging skills (Scala experience highly beneficial)

Responsibilities

• Ensure engineering teams develop secure applications by applying secure coding best practices for cloud applications and creating training and procedural materials
• Perform security reviews and penetration tests - at design and implementation stages - and propose appropriate solutions for any security deficiencies
• Lead teams in threat modeling exercises to pressure test technical designs
• Leverage Sumo’s own product, and other third party tools to build security and “defense in depth” into our product and software development lifecycle
• Integrate and implement solutions improving Sumo Logic's security posture
• Participate in security research, investigations, platform hardening, and audits
• Drive continual improvement and operational excellence for our security tools
• Participate in on-call to provide coverage for security and platform components

Benefits

This role can be remote - from anywhere in India