Responsibilities
- Collaborate with engineering groups on security architecture, threat modeling, and design input for core software analysis and adjacent tools.
- Help implement a quantifiable secure development lifecycle encompassing software composition analysis, static application testing, secrets detection, dependency management, and build security.
- Identify recurring security patterns across products and advocate for scalable, systemic fixes instead of isolated corrections.
- Assess and prioritize both internally found and externally disclosed product vulnerabilities, guiding engineering teams toward resolution.
- Work with engineering and customer support to coordinate fixes and manage external communications related to security issues.
- Assist in evaluating customer security questionnaires, audit demands, and ad hoc inquiries in coordination with the Director of Security Operations.
- Prepare technically sound responses to customer security queries, sourcing engineering data when necessary.
- Participate in customer discussions as a security expert and help build a repository of standardized answers.
- Support corporate detection and incident response efforts, particularly where product behavior impacts security outcomes.
- Refine and maintain detection rules in CrowdStrike NG-SIEM and Sumo Logic for product-related threats; assist in handling alerts from the MDR provider.
- Develop SOAR workflows and runbooks to minimize manual effort in security operations.
- Lead focused initiatives or manage small teams within broader security projects.
- Manage project progress in Jira with defined milestones and updates; provide technical insights during vendor assessments and proof-of-concept trials.
- Serve as a mentor and resource for junior team members on secure coding, product security, and threat analysis.
- Communicate complex technical topics clearly to technical and non-technical audiences.
- Convert informal knowledge into documented procedures, runbooks, and onboarding resources.
- Perform additional duties as assigned.
Other
- General office environment and responsibilities requiring extensive use of the computer which involves viewing a monitor and keyboarding for most of the workday.
- Placing and receiving phone calls.
- Occasionally moving and lifting objects up to 20 pounds.
- May require some travel as needed.
