Application Security Engineer

Flexera; United States; Remote; USD 100,000 - 150,000; Full time

Job summary

A leading company is seeking an experienced application security engineer to enhance the security posture of their cloud-based software. You will own security monitoring, work with development teams on automated security scans, and help maintain compliance certifications. The role requires proficiency in AWS or Azure, strong programming skills, and knowledge of secure coding practices.

Qualifications

• Experience designing and building security infrastructure in AWS or Azure.
• Proficiency in programming languages like Golang, Python or Java.
• Knowledge of OWASP Top 10 and secure coding practices.

Responsibilities

• Own and improve the security monitoring and detection infrastructure for SaaS.
• Work with development teams to enhance automated security scans.
• Conduct penetration testing and maintain compliance certifications.

Skills

Security infrastructure services

Security monitoring

Security compliance

Programming skills

Scripting languages

Interpersonal skills

DevSecOps

Agile concepts

Tools

AWS Cloud

Azure Cloud

Linux

Security Tools

Kubernetes

Job description

Flexera saves customers billions of dollars in wasted technology spend. A pioneer in Hybrid ITAM and FinOps, Flexera provides award-winning, data-oriented SaaS solutions for technology value optimization (TVO), enabling IT, finance, procurement and cloud teams to gain deep insights into cost optimization, compliance and risks for each business service. Flexera One solutions are built on a set of definitive customer, supplier and industry data, powered by our Technology Intelligence Platform, that enables organizations to visualize their Enterprise Technology Blueprint in hybrid environments—from on-premises to SaaS to containers to cloud.

We’re transforming the software industry. We’re Flexera. With more than 50,000 customers across the world, we ’ re achieving that goal . But we know we can’t do any of that without our team . Ready to help us re-imagine the industry during a time of substantial growth and ambitious plans? Come and see why we’re consistently recognized by Gartner, Forrester and IDC as a category leader in the marketplace.Learn more at flexera.com

We are a fast-growing, category-leading organization with ambitious objectives and a positive, inclusive culture. We're looking for passionate professionals who want to grow their talents and achieve great things. If that sounds like you, we want to talk to you about joining our team.

The Security Operations team is responsible for accelerating the delivery and improving the operations and security of our cloud-based software.

The Role
We are looking for an experienced application security engineer to join us as we build and improve our security posture.

What will you do?

• Own and improve the security monitoring, detection and response infrastructure supporting our SaaS platform. Ensure that security infrastructure is appropriately designed, configured, and operated.
• Work with development teams to build and improve automated security scans in their delivery pipelines.
• Work with our engineering, compliance and solution engineering teams to gather security evidence and help maintain Flexera’s certifications.
• Work with internal and external collaborators to run Flexera’s penetration testing program
• Work with our compliance team to codify and automate our compliance processes.

You should have.

• Experience designing and building security infrastructure services in AWS Cloud and/or Azure Cloud.
• Proficiency in one or more programming languages out of Golang, Nodejs, Python or Java
• Proficiency with one or more scripting languages
• Proficiency with Linux based operating systems like CentOS, RHEL, Ubuntu, Debian, Amazon Linux
• Knowledge of secure coding practices
• Familiarity with security framweworks and standards like the OWASP Top 10 and ISO27001
• Deep understanding of web application architecture
• Proficiency with Security Tools and Technologies in the field of SAST, SCA, DAST and Penetration Testing
• Skills articulating security requirements to technical and non-technical teams.
• Strong interpersonal skills; mentoring, coaching, collaborating, and team building.
• Familiarity with DevSecOps, and agile concepts.

Nice if you have

• Experience with securing container-based systems and delivery pipelines.
• Kubernetes knowledge esp. EKS and AKS
• FedRamp experience.

Flexera is proud to be an equal opportunity employer. Qualified applicants will be considered for open roles regardless of age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by local/national laws, policies and/or regulations.

Flexera understands the value that results from employing a diverse, equitable, and inclusive workforce. We recognize that equity necessitates acknowledging past exclusion and that inclusion requires intentional effort. Our DEI (Diversity, Equity, and Inclusion) council is the driving force behind our commitment to championing policies and practices that foster a welcoming environment for all.

W e encourage candidates requiring accommodations to please let us know by emailing [e-mail] .