Application Security Engineer

Flexera saves customers billions of dollars in wasted technology spend. A pioneer in Hybrid ITAM and FinOps, Flexera provides award-winning, data-oriented SaaS solutions for technology value optimization (TVO), enabling IT, finance, procurement and cloud teams to gain deep insights into cost optimization, compliance and risks for each business service. Flexera One solutions are built on a set of definitive customer, supplier and industry data, powered by our Technology Intelligence Platform, that enables organizations to visualize their Enterprise Technology Blueprint™ in hybrid environments—from on-premises to SaaS to containers to cloud.

We’re transforming the software industry.  We’re Flexera.  With more than 50,000 customers across the world, we’re achieving that goal. But we know we can’t do any of that without our team.  Ready to help us re-imagine the industry during a time of substantial growth and ambitious plans?  Come and see why we’re consistently recognized by Gartner, Forrester and IDC as a category leader in the marketplace. Learn more at flexera.com

We are a fast-growing, category-leading organization with ambitious objectives and a positive, inclusive culture. We're looking for passionate professionals who want to grow their talents and achieve great things. If that sounds like you, we want to talk to you about joining our team.

The Security Operations team is responsible for accelerating the delivery and improving the operations and security of our cloud-based software.

The Role
We are looking for an experienced application security engineer to join us as we build and improve our security posture.

What will you do?

• Own and improve the security monitoring, detection and response infrastructure supporting our SaaS platform. Ensure that security infrastructure is appropriately designed, configured, and operated.
• Work with development teams to build and improve automated security scans in their delivery pipelines.
• Work with our engineering, compliance and solution engineering teams to gather security evidence and help maintain Flexera’s certifications.
• Work with internal and external collaborators to run Flexera’s penetration testing program
• Work with our compliance team to codify and automate our compliance processes.

You should have.

• Experience designing and building security infrastructure services in AWS Cloud and/or Azure Cloud.
• Proficiency in one or more programming languages out of Golang, Nodejs, Python or Java
• Proficiency with one or more scripting languages
• Proficiency with Linux based operating systems like CentOS, RHEL, Ubuntu, Debian, Amazon Linux
• Knowledge of secure coding practices
• Familiarity with security framweworks and standards like the OWASP Top 10 and ISO27001
• Deep understanding of web application architecture
• Proficiency with Security Tools and Technologies in the field of SAST, SCA, DAST and Penetration Testing
• Skills articulating security requirements to technical and non-technical teams.
• Strong interpersonal skills; mentoring, coaching, collaborating, and team building.
• Familiarity with DevSecOps, and agile concepts.

Nice if you have

• Experience with securing container-based systems and delivery pipelines.
• Kubernetes knowledge esp. EKS and AKS
• FedRamp experience.