Senior Application Security Engineer

🔥 37 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Jumio Corporation

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2010

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Jumio Corporation is a global leader in AI-driven identity verification solutions that help businesses onboard new customers quickly while keeping fraudsters out. With a platform trusted by leading brands worldwide, Jumio processes over 1 billion transactions and supports more than 5,000 ID types across 200 countries and territories. It uses advanced AI and machine learning models to provide predictive fraud insights, ensuring compliance with AML requirements and enabling seamless user experiences. Jumio offers solutions in various industries like financial services, healthcare, gaming, and more, allowing businesses to prevent fraud and protect their reputation.

📋 Description

• Collaborate with Engineering and Infrastructure teams to identify and fill any security gaps in our SDLC, cloud infrastructure and associated processes • Integrate security into the Software/Infrastructure processes from initial threat modelling to decommissioning • Perform manual penetration testing of Web/mobile applications and APIs • Audit source code and perform code review for critical application changes • Help teams in understanding security vulnerabilities and associated risk, providing guidance in prioritizing and remediation efforts • Identify critical security risks and drive mitigation with engineering teams • Manage cross-functional internal and external team collaboration and communications • Deploy security services and tools through IaC, and actively promote the culture of security as code • Periodic security assessments and configuration review of cloud environments • Build custom security solutions tooling and automation and lead security initiatives • Build, promote and scale DevSecOps across the company and enable integration of tools and practices as the teams transition to DevSecOps.

🎯 Requirements

• 10+ years of experience in a security engineering role, specialized in application security and cloud security • Strong familiarity with Linux operating systems and cloud ecosystems like Amazon AWS, GCP, including networking concepts and security services and patterns • Understanding of core AWS Cloud Services (e.g. EC2, ECS, Lambda, RDS, etc.) architecture (e.g. Well-Architectured Framework) and micro services • Experience in implementing secure IaC solutions • Experience in container-based architecture and deployments (Docker, Kubernetes) • Hands on experience in pen testing Web application and API • Deep understanding of OWASP Top 10 and CWE 25 • Experience in using SAST, DAST, IAST, SCA tools • Experience in Threat Modeling • Ability to communicate well, present security threats and risks to engineering teams • Self-motivated; ability to work independently on new initiatives.

🏖️ Benefits

• Jumio is a collaboration of people with different ideas, strengths, interests and cultures. We welcome applications and colleagues from all backgrounds and of all statuses.