Position: Application Security Engineer at Product company
Company: Alcor
Experience required: 2y
English level: upper

A global technology company that develops conversational commerce and AI software.

Conversational AI company creating digital experiences that are Curiously Human. Every person is unique, and our technology makes it possible for companies, including leading brands like HSBC, Orange, and GM Financial, to treat their audiences that way at scale. Nearly a billion conversational interactions are powered by our Conversational Cloud each month.
You'll be successful at LivePerson if you are excited to build something from the ground up. You excel by finding daily opportunities to grow at the same pace as the technology we're building, and you build partnerships that improve our business. Likewise, you're someone who sees feedback as a chance to learn and grow and believes decisions powered by data are the norm. You care about the well-being of others and yourself.

Job Requirements
We’re looking for an experienced and passionate, hands-on Application Security Engineer that is eager to help LivePerson to deliver secure Cloud and Mobile based solutions, by helping in implementing and applying agile Secure Development Lifecycle processes.


Job Responsibilities
Perform security penetration tests (both application and infrastructure for Web and mobile applications)
Perform security design reviews and threat modeling
Collaborate with the development engineers and provide mitigation recommendations
Manage and enhance application security tools (Static Code Analysis, Open Source vulnerabilities tools, Dynamic Application Security tools, etc), and develop in-house application security automation tools
Analyze, validate and verify potential threats and vulnerabilities
Help in creating Application Security policy standards and guidelines

Required Skills
3+ years of experience in Application security (web and mobile)
Experience in performing threat modeling and pen testing
Knowledge of application software development, including automated build and delivery techniques
Experience with scripting languages, JS, Perl, RegEx, etc
Good communication skills and a desire to function in a global team.
Customer facing capabilities
Excellent written and verbal English communication skills

Preferred Skills
Experience with Public Cloud Security
Advanced security qualifications (CISSP, CCSLP, etc)