Quanata is hiring a
Senior Application Security Engineer

Summary

Quanata is seeking a highly experienced Senior Application Security Engineer to join their Information Security team. The role involves developing and implementing high-level application security architecture, collaborating with development teams, creating threat models, and ensuring compliance with industry regulations. The ideal candidate has 8 years of experience in information security, including 5 years in application security engineering.

Requirements

• 8 years of experience in information security, to include 5 years of experience in application security engineering, with a specialization in security architecture
• Expertise in security-by-design principles and a deep understanding of application security frameworks and standards
• Experience in working with software development teams, providing security oversight in complex application ecosystems
• Familiarity with OWASP and relevant standards like ASVS and MASVS
• Strong skills in threat modeling, risk assessment, and vulnerability management
• Proficient in at least one programming language and relevant security tools
• Excellent communication skills, with the ability to lead security initiatives and train teams on security best practices

Responsibilities

• Develop and implement high-level application security architecture across diverse projects, with a focus on the insurance industry
• Collaborate with development and product teams to integrate advanced security solutions by design into business-critical applications
• Create and refine application threat models, emphasizing robust security measures tailored to the unique challenges of the insurance sector
• Create application security architecture patterns, and product security requirements
• Perform security code reviews and application security testing
• Provide strategic guidance on application security best practices and oversee the implementation of these practices in software development life cycles
• Evaluate and respond to vulnerabilities identified through internal security testing, prioritizing according to business impact
• Drive initiatives to enhance security awareness and practices within the application development teams

Benefits

• Medical, dental, vision, life insurance and supplemental income plans for you and your dependents
• A Headspace app subscription
• Monthly wellness allowance
• A 401(k) Plan with a company match
• Work from Home Equipment: a one-time payment of $2K will be provided to cover the purchase of in-home office equipment and furniture at your discretion
• All employees accrue four weeks of PTO in their first year of employment. New parents receive twelve weeks of fully paid parental leave which may be taken within one year after the birth and/or adoption of a child
• Up to $5000 each year for professional learning, continuing education and career development
• Udemy subscriptions and access to multiple different coaching opportunities through BetterUp