Position: Application Security Engineer
Company: Zoolatech
Category: Security
Experience required: 2y
English level: intermediate

**Responsibilities**
* Penetration testing: Hunt for security issues within our applications via internal pen tests.
Secure by design: Threat model with Engineering Teams. Then, help teams “bake” these threat models into internal Ruby (and Javascript) libraries.
* Code reviews: Discover weakness in our code before it reaches production.
* Bug Bounty Program: Help design Credible’s Bug Bounty Program and be involved in submission triage (and remediation).
* Secure Software Development Lifecycle: Implement automated tooling (e.g. SAST, DAST, IAST) within our SDLC.
* Software Development: Write Python code to automate various security controls and processes.
* Security Champions Program: Scale security at Credible by training security-minded developers.
* Collaboration with the DevOps Team: Pair with members of the DevOps Team to mitigate Application Security risks in Kubernetes (and AWS). (No previous AWS or Kubernetes knowledge required.)

**Skills Required**
* Bachelor’s or Master’s degree in Computer Science or related field
* Willingness to onboard yourself onto a modern tech stack (e.g., GraphQL, microservice auth leveraging AWS Cognito, Kubernetes)
* 3+ years in an Application Security role
* 3+ years of development experience
* Knowledge of Application Security fundamentals (e.g., OWASP Top 10)
* Knowledge of Application Security risks within containerized and cloud environments
* English - upper-intermediate or higher level

**Soft-skills:**
* Problem solving skills and the ability to work under pressure
* Self-starter with strong interpersonal, communication, and collaboration skills