Trellix seeks a Senior Software Quality Engineer with 5+ years of experience in application security testing, CI/CD, DevSecOps, and SDLC. Strong understanding of OWASP Top 10 and hands-on experience with automated testing tools is essential. Knowledge of cloud security configuration and relevant data compliance standards is also preferred.

The Future of XDR. We Bring Security to Life.

Trellix

<div class="css-ey7qxc"><div data-automation-id="jobPostingDescription" class="css-oplht1">Job Title:Senior Software Quality EngineerAbout Trellix:Trellix is a global company redefining the future of cybersecurity and soulful work. The company’s comprehensive, open and native cybersecurity platform helps organizations confronted by today’s most advanced threats gain confidence in the protection and resilience of their operations. Trellix, along with an extensive partner ecosystem, accelerates technology innovation through artificial intelligence, automation, and analytics to empower over 50,000 business and government customers with responsibly architected security. More at  <a rel="noopener noreferrer" target="_blank" href="https://trellix.com/">https://trellix.com</a>.&nbsp;Role Overview:Hiring for a dynamic Test Engineer focused on product security for the On Prem SIEM Engineering TeamAbout the role:<ul><li>Has a strong level of understanding of the threat landscape in their area of focus (e.g., endpoint, network, email, etc.)</li><li>Can communicate insights about threats and our product response with internal stakeholders (Sales, PM, etc.)</li><li>Spots trends as they are happening and contributes to research projects to address these trends</li><li>Independently delivers production code/content for multiple engines/components for their product focus area</li><li>Expert-level knowledge of product internals for their product focus area</li><li>Builds "high risk" production code/content for their product focus area (e.g., blocking mode signatures, performance intensive changes, lower-level protocol/format parsing, system cleaning)</li><li>Reviews and approves production code/content from peers and junior team members</li><li>Participates in threat hunting initiatives (e.g., analysis of product telemetry) and incorporates findings into research and detection content initiatives</li><li>Has sufficient understanding of the capabilities of other products to work across product focus areas to deliver solutions</li><li>Ability to identify detection opportunities in other products and provide analysis</li></ul>About You:<ul><li>5+ years of professional work experience.</li><li>Deeply ingrained understanding of application security concepts</li><li>Strong familiarity with CI/CD, DevSecOps, and the entire SDLC</li><li>Understanding of a range of standardized testing approaches including application security testing tools: static (SAST), dynamic (DAST), teractive (IAST), and software composition analysis (SCA)</li><li>Ability to evaluate testing process and practices, develop and execute standard testing strategies</li><li>Strong familiarity and experience working within agile/Scrum or Kanban model</li><li>Familiarity with the OWASP Top 10 and hands-on experience with automated testing tools such as Burp Suite, Metasploit, Anchore, Snyk, and narQube</li><li>Familiarity with network analysis tools like Wireshark, Charles, and Nmap</li><li>Experience using one or more development languages/platforms: Python, Java, JavaScript, .Net, and SQL</li><li>Strong comfort level and hands-on experience with cloud security configuration</li><li>Familiarity with developing software security systems</li><li>Knowledge of relevant data compliance standards</li><li>Effective communication skills along with strong project management skills</li></ul>Company Benefits and Perks:We work hard to embrace diversity and inclusion and encourage everyone to bring their authentic selves to work every day. We offer a variety of social programs, flexible work hours and family-friendly benefits to all of our employees.<ul><li>Retirement Plans</li><li>Medical, Dental and Vision Coverage</li><li>Paid Time Off</li><li>Paid Parental Leave</li><li>Support for Community Involvement</li></ul>We're serious about our commitment to diversity which is why we prohibit discrimination based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.</div></div>