Sr. Application Security Engineer

Alteryx; United States; Remote; USD 130,000 - 175,000; Full time

Job summary

An innovative firm is seeking a Senior Application Security Engineer to integrate security into the Software Development Lifecycle. This remote-friendly role involves leading application security automation, enhancing workflows, and being a subject matter expert in security tooling. You will empower engineering teams through seamless security testing and manage vulnerability workflows. If you are passionate about security and want to make a significant impact in a dynamic environment, this opportunity is perfect for you.

Benefits

Bonus or Commission

Medical Benefits

Retirement Plans

Wellness Programs

Employee Discounts

Qualifications

• Strong foundation in software engineering and DevSecOps.
• Proven experience in application security tooling and concepts.

Responsibilities

• Develop and design application security integration within CI/CD.
• Enhance application security workflows and processes.

Skills

Software Engineering

DevSecOps

Secure SDLC

Application Security Concepts

Web Security

Secure Coding

Cryptography

System Design

Vulnerability Management

Tools

SAST

DAST

SCA

Container Security

Infrastructure as Code (IaC)

Job description

We’re looking for problem solvers, innovators, and dreamers who are searching for anything but business as usual. Like us, you’re a high performer who’s an expert at your craft, constantly challenging the status quo. You value inclusivity and want to join a culture that empowers you to show up as your authentic self. You know that success hinges on commitment, that our differences make us stronger, and that the finish line is always sweeter when the whole team crosses together.

Alteryx is searching for a Sr. Application Security Engineer. This position is remote-friendly.

Position Overview:

As Senior Application Security Engineer, you will play a pivotal role in the integration of security into our Software Development Lifecycle. This is a critical role within the Information Security organization to safeguard an environment where code changes happen rapidly. You will build security control testing at scale while balancing risk reduction and pragmatism.

Primary Responsibilities:

1. Play a lead role in developing and designing application security integration and automation within CI/CD
2. Enhance and streamline application security workflows and processes
3. Be a subject matter expert in all application security tooling (SAST, DAST, SCA, Container, IaC) and provide recommendations for remediation of findings
4. Enable automation for vulnerability management workflows and reporting
5. Empower engineering partners through frictionless security testing
6. Lead scoping and requirements for manual penetration testing driven internally and by third parties

Required Skills:

1. Strong foundation in software engineering, DevSecOps, and Secure SDLC
2. Proven prior experience and demonstrable recurring success in application security concepts and tooling
3. Strong foundation in SCM and CI/CD and success with implementation and integration of AppSec tooling into these platforms
4. Prior experience across web security, secure coding, software development, cryptography, and system design
5. Expert knowledge in common web security vulnerabilities (OWASP top 10) and remediation

Compensation:

Alteryx is committed to fair, equitable, and transparent compensation. Final compensation will be determined by various factors such as your relevant work experience, education, certifications, skills, and geographic location.

The salary range for this role in the United States is $130,000 - $175,000.

Employees may also be eligible for a wide range of other benefits, such as a bonus or commission, medical, retirement, financial, wellness, time off, employee discounts, and others.

Interested? Learn more and apply today at alteryx.com/careers!

This position involves access to software/technology that is subject to U.S. export controls. Any job offer made will be contingent upon the applicant’s capacity to serve in compliance with U.S. export controls.