Senior Security Engineer

December 7, 2023

Guidewire Software

WebsiteLinkedInAll Job Openings

Engage, Innovate, Grow Efficiently

Data management and BI • Predictive Analytics • Risk Analysis • Cloud Platform • Unified digital, core, analytics, and AI

1001 - 5000

💰 $750k Series C on 2008-03

Description

• Ensure proper execution of PSIRT Process • Perform root cause analysis • Triage code defect based issues • Cultivate strong working relationships with external researchers • Continually improve processes used to identify and fix security issues • Coordinate with internal product development teams • Execute penetration tests • Perform security-focused code reviews • Assist teams in addressing application security vulnerabilities • Validate findings from security scanning tools • Ideate data-driven enhancement strategies • AWS/Cloud Experience a strong plus • Bug bounty program participation a plus

Requirements

• Bachelor's/master’s in computer science or equivalent • Relevant industry certifications preferred (CSSLP, CISSP, GIAC, OSCP) • Minimum 7-10 years of relevant Application Security Experience • Minimum 2-5 years of experience with Penetration testing • Strong understanding of OWASP Top 10 and common product security vulnerabilities • Strong written and verbal communication skills • Ability to build relationships and influence individuals at all levels • Experience with application security tools • AWS/Cloud Experience a strong plus • Bug bounty program participation a plus • Knowledge of the security research community a strong plus • Scripting skills or development experience a significant plus

Benefits

• Join a high-powered and high-performing team • Opportunity to work across the entire organization • Work with executives and product teams • Investigate reported vulnerabilities • Perform root cause analysis • Coordinate customer/external product security incidents • Working cross-functionally with all business units • Development and maintenance of product security incident monitoring • Penetration testing and code reviews • Enhance existing product security incident response program • Support the preparation of security releases • Develop security tooling and automation • Validate findings from security scanning tools • Bug bounty program participation • Scripting skills (Python/Perl/Ruby, shell scripting)