Security Engineer

DataVisor is the world’s leading AI-powered Fraud and Risk Platform that delivers the best overall detection coverage in the industry. With an open SaaS platform that supports easy consolidation and enrichment of any data, DataVisor's solution scales infinitely and enables organizations to act on fast-evolving fraud and money laundering activities in real time. Its patented unsupervised machine learning technology, advanced device intelligence, powerful decision engine and investigation tools work together to provide guaranteed performance lift from day one. DataVisor's platform is architected to support multiple use cases across different business units flexibly, dramatically lowering the total cost of ownership, compared to legacy point solutions. DataVisor is recognized as an industry leader and has been adopted by many Fortune 500 companies across the globe.

Our award-winning software platform is powered by a team of world-class experts in big data, machine learning, security, and scalable infrastructure. Our culture is open, positive, collaborative, and results driven. Come join us!

We are seeking a Security Engineer who possesses expertise in cloud environments. You will be part of a team that protects system boundaries, keeps computer systems and network services hardened against attacks, and secures sensitive data. You will collaborate closely with our team to ensure that our products and environments are built to industry security standards and best practices.

RESPONSIBILITIES

• Engage with internal business teams on projects to assess for security risk and help deliver secure solutions via threat modeling, code review, penetration testing, and enforcing secure development lifecycle
• Assist with the implementation and execution of the application security program with the business and engineering teams
• Provide guidance on security architecture related to cloud computing products and services
• Test web applications for common vulnerabilities including input validation, broken access controls, session management, cross-site scripting, SQL injection and web server configuration issues
• Utilize security information and event management for real-time analysis of security alerts generated by our cloud infrastructure and applications
• Actively participate in Incident Management, Change Management, Security Policy Management and Security Incident Response
• Perform secure code reviews and implement security in all the phases of SDLC.
• Perform SAST, DAST, Internal Penetration testing on the Applications and the Infrastructure.
• Lead SOC2 and PCI Compliance programs