Senior Application Security Engineer

Company: ZenDesk
Location: Myrtle Point
Posted on: April 9, 2021

Job Description:

Job Description Are you passionate about application security? Do you get a thrill out of discovering security vulnerabilities in web applications and mobile apps? Do you enjoy the challenge of designing creative solutions to tough problems? Are you excited about securing the public cloud? Can you thrive in a dynamic team where our 150k+ customers count on us for protecting their data? If so, you might be a perfect fit for Zendesk's Product Security Team! At Zendesk Security we believe that security is everyone's responsibility and that security decisions should be simple. When our customers or employees face options, we strive to make the secure options the easiest way of achieving their goals. On the Zendesk Product Security Team we implement tools and build processes that allow Zendesk Engineering to make the right, secure decisions for our customers. We partner with our engineers to prioritize security during the entire software development process and provide tools and programs to do so. What you'll do as a Senior Product Security Engineer Partner with our Professional Services and Cloud Security teams team to ensure we are delivering custom solutions to our customers built with Zendesk that meet the level of security that customers expect from all of our products. You will accomplish this through both assessment of solutions and empowering Professional Services to take advantage of the same processes and technology that we provide to engineering teams. Perform threat modeling and review software design in partnership with Professional Services and Engineering. Participate in the vulnerability management process including triaging identified vulnerabilities and tracking them through the vulnerability lifecycle. Partner with Professional Services and Engineering through our Security Champions program to nurture a security culture and to help our developers improve their security posture. Be the voice of Zendesk Security while responding to customer security questions and issues. Support incident response efforts as needed and work with teammates to investigate them. Our awesome team We are a global team with members working around the world. Having team members that come from different cultures and backgrounds gives us a diversity of opinions and experience, enabling us to see problems from many different perspectives and design the best solutions. Our Product Security team members are always learning and growing their capabilities and skill sets. What you need to succeed Bachelor's degree in Computer Science or other relevant focus of study. At least 5 years of application security experience, plus experience mentoring junior staff. Experience securing large Amazon Web Service deployments with an understanding of the threats and risks to modern cloud environments including and security best practices on how to address those risks in the AWS cloud. Candidates should be familiar with AWS services relevant to security, including, but not limited to IAM policy, Cloudtrail, Config, GuardDuty, Macie, KMS, etc. Programming experience with Python or Java is preferred, but experience with other languages and frameworks will help (Ruby, Scala, Golang, Node.js, Ember.js, or React) - please send us your GitHub/Bitbucket account or any other examples of projects, if available. Knowledge of the threats to modern web applications including the ability to assess the security of web applications, identifying vulnerabilities and reporting those issues to developers in a clear and concise report. Understanding of common risks to API integration and middleware. Excellent problem solving skills. Outstanding verbal and written communication skills. Ability to work on multiple projects/tasks at once - balancing and prioritizing work appropriately. Experience with agile development processes, working in a fast-paced environment with continuous integration. Security certifications are a plus such as OSCP, GWEB, GPEN, GWAPT, CEH, CISSP, GSEC, etc #LI-BB3 Zendesk builds software for better customer relationships. It empowers organizations to improve customer engagement and better understand their customers. Zendesk products are easy to use and implement. They give organizations the flexibility to move quickly, focus on innovation, and scale with their growth. More than 150,000 paid customer accounts in over 150 countries and territories use Zendesk products. Based in San Francisco, Zendesk has operations in the United States, Europe, Asia, Australia, and South America. Interested in knowing what we do in the community? Check out the Zendesk Neighbor Foundation to learn more about how we engage with, and provide support to, our local communities. Zendesk is an equal opportunity employer, and we're proud of our ongoing efforts to foster global diversity, equity, & inclusion in the workplace. Individuals seeking employment at Zendesk are considered without regard to race, color, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law. By submitting your application, you agree that Zendesk may collect your personal data for recruiting, global organization planning, and related purposes. Zendesk's Candidate Privacy Notice explains what personal information Zendesk may process, where Zendesk may process your personal information, its purposes for processing your personal information, and the rights you can exercise over Zendesk's use of your personal information.

Keywords: ZenDesk, Medford , Senior Application Security Engineer, Engineering , Myrtle Point, Oregon