Staff Application Security Engineer - Remote

Overview

Ironclad is seeking a skilled Application Security Engineer with a passion for securing modern software platforms and protecting sensitive data. This role will be responsible for conducting security assessments, identifying and mitigating risks, and implementing security best practices and process improvements across Ironclad’s Product, Platform and Engineering teams.

In Short

• Develop and implement secure coding practices, procedures, and standards for software development teams.
• Conduct application security assessments and vulnerability testing to identify and mitigate risks.
• Perform security reviews of code changes and ensure that security issues are addressed.
• Collaborate with cross-functional teams to remediate software vulnerabilities.
• Integrate security review processes into Ironclad’s CI/CD pipeline.
• Conduct threat modeling and risk analysis to protect sensitive data.
• Provide domain expertise on protective controls.
• Work closely with members of the SRE, Development, IT, and Security teams.
• Implement compliance and security requirements.
• Contribute to secure coding and cybersecurity training programs.

Requirements

• BA/BS/MS in Computer Science or related field or equivalent experience.
• 3+ Years of experience in application security or software development.
• In-depth knowledge of application security concepts and practices.
• Experience with SAST and SCA tools.
• Experience with security testing tools.
• Experience with SOC 2, ISO 27001, NIST, and CIS standards.
• Experience operating in any cloud provider.
• Strong desire to take ownership of problems.
• Excellent communication, analytical and problem-solving skills.
• Team and goal-oriented.

Benefits

• Health, dental, and vision insurance.
• 401k.
• Wellness reimbursement.
• Take what you need vacation policy.
• Generous parental leave for both primary and secondary caregivers.