Posted: 8 months ago
Posted: 8 months ago
Let Jobaaj One apply for you
An AI agent that applies to roles like this on employers' own sites. 25 applications free, no card needed.
Job Description
Similar Jobs
Please verify your account first!
Send OTP
Posted over 15 days ago, so the role may have closed. Confirm on the employer's page when you apply, or see similar jobs.
Job Description
What You'll DoWhat You'll Need to be Successful
- Avalara is seeking aSenior Manager ofApplicationSecurityto lead an engineering teamfocused ondesigning,implementingand deploying security engineering tooling for our code scanning and web scanning pipelines
- This role willbe responsibleforscaling the traditional application security mode of code auditing into automated pipelines to find security vulnerabilities such as XSS, SSRF, RCE, CSRF and SQLi across Avalaras code base
- You willleverageyour software skillsand security knowledge to help uplift the security posture of our products and services
- This is a unique opportunity to make real impacts to our overall software security posture as you continue to uplevel your own software engineering and security skills
- This role is ideal for someone who combines deep technical knowledge in cloud and application security with a strongtrack recordofcollaborativeleadership and cross-functional influence
- This role willreport tothe VP of Product Security
What Your Responsibilities Will Be
- You will lead, coach, and grow a high-performing team of security engineers focused on design, build and deploy microservice-based automationleveragingmanually discovered findings to scale automated scanning and vulnerability discovery efforts
- You will provide technical leadership, mentorship, and direction to staff and Engineering teams.
- You will identify tooling gaps in static and dynamic scanning technologies and build out tooling to correct coverage and findings accuracy.
- You will provide security guidance and consultancy to engineering service owners to remediate known vulnerabilities. Build company-wide remediation burndowns plans.
- You will explore and leverage AI to augment existing application security capabilities.
- You will provide expert guidance on threat modelling, vulnerability management, and security best practices across all areas of SDLC to Engineering.
- You will manage the execution of complex, multi-team security projects with clear milestones, metrics, and outcomes.
- B.S. or M.S. in Computer Science, Engineering, or a related technical field.
- 12+ years of total experience, including 5+ years inapplicationsecurity, and 35 years in atechnical leadership role.
- Hands-onexperience in SCA, SAST, DAST and related code scanning technologies.
- Experienceidentifying, evaluation, and remediating application vulnerabilities including the OWASP Top 10 and/or CWE Top 25.
- Ability to communicate ideas and proposal concisely to technical audiences.
- Proven ability to design and integrate security tooling into CI/CD pipelines and SDLC workflows.
- Development background using Golang and Python
Skills
SdlcSCAGolangDASTSSRFRCEOWASPSASTIf a job posting appears fraudulent, asks for payment, contains misleading information, or violates our guidelines, please report it immediately. Our team will review it promptly, Jobaaj does not charge any fee from the applicants.
Similar Jobs
View all
Loading...
Looking for something similar?
Get jobs like this by email
New IT / Software Development & Related roles in Remote.
Job Alert
Google hiring for Specific Roles Apply Now!
1 min ago
New Opportunity
Amazon is hiring freshers Apply Now!
5 min ago
Featured Jobs
Microsoft opening 50+ positions Apply Now!
10 min ago
One email a day. Unsubscribe any time.
