Application Security Engineer

The Application Security Engineer works with the Product Development group to ensure the security of Unify Square’s products from design to deployment and maintenance.  This includes a wide range of activities such as architecture review, risk assessment, security testing, incident response, and process improvement.  This role requires deep technical knowledge, well developed skills for engagement, and solid communication skills to collaborate and partner successfully across the organization.

AS PART OR OUR TEAM, YOU WILL:

• Perform on-going product security design reviews, code reviews, and security testing against our products to improve software security.
• Define metrics and regular reporting mechanisms for measuring compliance and performance of application security controls.
• Consult with and educate team members on secure coding practices.
• Provide engineering designs and patterns for new software solutions to help mitigate security vulnerabilities.
• Collaborate with IT and Product Development to design and implement security technologies and controls on-premises and in the cloud.
• Maintain technical documentation.
• Develop familiarity with new tools and best practices as they evolve.

• 3+ years of experience in an application focused information security role or software engineer with strong interest in security.
• Hands-on coding experience in one or more languages such as C#, JavaScript, Python, etc.
• Detailed technical knowledge of techniques, standards and capabilities for authentication and authorization, applied cryptography, security vulnerabilities and remediation
• Experience with cloud security (e.g., Azure, AWS, GCP, etc.).
• Experience with security testing technologies such as DAST and SAST.
• Strong analytical and troubleshooting skills.
• Strong written and verbal communication skills, including technical and non-technical presentations and documentation.
• Planning, organizational skills, ability to handle multiple projects without direct supervision.
• Interpersonal, teamwork and customer relationship skills.

Nice to have:

• Knowledge of software and application development lifecycle and architectures.
• Knowledge of web related technologies (Web applications, Web Services and Service Oriented Architectures) and of network/web related protocols.
• At least one information security certification preferred (e.g., CISSP, GIAC).
• Experience with Azure DevOps and best practices.
• Ability to travel as required, including internationally.