Position: Application Security Engineer
Company: InCountry
Category: Security
Experience required: 3y
English level: intermediate

As a key team member of the Trust and Security team, you will help ensure InCountry maintains the highest level of security and privacy in our services, evangelize the importance of security and privacy both internally and externally, manage the InCountry SDLC program and work directly with InCountry engineering teams to ensure InCountry ships and maintains secure and private services.



Responsibilities

Own and manage the InCountry bug bounty program
Manage SDLC program
Conduct penetration testing of application and infrastructure and work with teams to close all findings
Conduct red team tests
Perform threat models of all applications, risk rate all findings and work with teams to close all findings
Develop, communicate and provide regular updates on application security roadmap 


Requirements

5-7 years in an application security role
Prior experience developing threat models in alignment with industry standards (e.g. NIST, MS SDL, etc)
Be a security subject matter expert and respond to any internal security engineering questions/request
Correctly balance security risk and product advancement
Perform penetration testing on our internal and external applications
Perform proactive research to detect new attack vectors
Prior experience integrating static & dynamic analysis in CI/CD pipeline
Train our engineers on secure software engineering
Interact with the security community promoting the InCountry brand
Excellent written and verbal communications skills
SME in cryptography, authentication and security protocols
Bachelor's degree in Computer Science or a related field
Preferences

Prior experience with GCP, AWS, Azure and GKE 
Has a deep understanding of web applications