Senior Security Engineer

December 8, 2023

Guidewire Software

WebsiteLinkedInAll Job Openings

Engage, Innovate, Grow Efficiently

Data management and BI • Predictive Analytics • Risk Analysis • Cloud Platform • Unified digital, core, analytics, and AI

1001 - 5000

💰 $750k Series C on 2008-03

Description

• Guidewire PSIRT (Product Security Incident Response Team) responsible for Guidewire product vulnerability management • Coordinate customer/external product security incidents and reported security issues • Work cross-functionally with all business units, engineers, and support teams • Develop and maintain product security incident monitoring, detection, and response tools and processes • Perform security review and code review of Guidewire applications • Conduct penetration testing to ensure discovery of vulnerabilities • Enhance existing product security incident response program • Coordinate security reviews and penetration testing assessments • Develop security tooling and automation • Assist in addressing application security vulnerabilities • Validate findings from security scanning tools

Requirements

• Bachelor's/master's in computer science or equivalent • Industry related certifications preferred • Minimum 7-10 years of relevant Application Security Experience • Solid understanding of OWASP Top 10 and common product security vulnerabilities • Strong written and verbal communications skills • Proven ability to build relationships and influence individuals • Experience with application security tools • AWS/Cloud Experience a strong plus • Bug bounty program participation a plus • Knowledge of the security research community a plus • Scripting skills or development experience a significant plus

Benefits

• Competitive salary and benefits • Opportunity to be part of a high-powered and high-performing team • Work with a diverse group of professionals in various business units • Continuous improvement and professional development • Collaboration with external researchers and reporting organizations