Staff Security Engineer

December 8, 2023

Guidewire Software

WebsiteLinkedInAll Job Openings

Engage, Innovate, Grow Efficiently

Data management and BI • Predictive Analytics • Risk Analysis • Cloud Platform • Unified digital, core, analytics, and AI

1001 - 5000

💰 $750k Series C on 2008-03

Description

• Lead and own PSIRT Process • Perform root cause analysis • Quantitatively evaluate risk and provide guidance • Drive issues to closure • Cultivate strong working relationships • Continually improve processes to fix product security issues • Coordinate regular security reviews and penetration testing assessments • Execute internal penetration tests • Perform security-focused code reviews • Support the preparation of security releases • Create security guidance and documentation • Develop and deliver security training • Assist teams in reproducing, triaging, and addressing application security vulnerabilities

Requirements

• Strong triaging and root cause analysis skills • Knowledge of industry standard security metrics (CVSS) • Project management and product management experience • Familiarity with security incident response • Experience in security reviews and penetration testing • Ability to evaluate and address application security vulnerabilities • Excellent communication and collaboration skills • Strong understanding of product security best practices and methodologies • Proficient in creating security guidance and documentation • Knowledge of security tooling and automation • Ability to deliver security training and outreach

Benefits

• Join a high-powered and high-performing team • Opportunity to work across the entire organization • Work with product teams to executives • Coordinate and resolve security incidents and events • Continuous improvement of security incident monitoring and response tools • Penetration testing and code review • Collaborate with external researchers and customers • Enhance product security incident response program • Develop security guidance, tooling, and automation • Deliver security training and outreach • Support teams in addressing application security vulnerabilities