Application Security Consultant

Veracode is seeking a motivated and energetic individual who is interested in working customer security professionals and software developers to improve application security in a measurable way. The Security Consultant will focus on training developers and security teams on application security best practices, by providing code-level remediation advice on potential application vulnerabilities that were identified by the Veracode service. As a Veracode Security Consultant, you will: be a subject matter expert in application security and provide consultative services to Veracode customers introduce customers and prospects to the use of the Veracode service interact with a variety of customer personnel, ranging from software developers to security executives. Have excellent technical skills and communication skills. Help users and various stake-holders within the customer organization interpret results from the Veracode service, and tailor the presentation to the appropriate audience. Participate in the sales efforts as needed when technical capabilities of the service are presented. Become an active participant and trusted advisor throughout the customer SDLC. Work with the Veracode product strategy team to file and track customer enhancement requests. Train and mentor new employees. This position requires a motivated individual that strives to find solutions that align with client needs while providing a repeatable solution(s) that can be reused across multiple programs. It will require constant and effective communication with internal/external cross-functional teams. This individual will have the opportunity and freedom to cultivate new and innovative solutions which will benefit our entire client base.

Candidate will operate as member of application security consulting team delivering tactical mentorship and strategic consulting in terms of general application security awareness, secure development best-practices, and effective utilization of Veracode services. Ability to effectively communicate application security concepts to developers unskilled in these is essential, as is the ability to also function as a trusted advisor to security stakeholders within client organizations. Additional opportunities of the role include threat analysis and modeling, evaluation of effectiveness of compensating controls within and beyond application implementation logic, creation of client security program recommendations.


Skills & Requirements


BS/BA in Computer Science, Engineering or related field, or equivalent experience. 2+ years of recent software development experience. Understanding of Application-level security and secure coding practices. Proficiency in one of more of the following programming languages: C, C++, C#, Java, or PHP Hands-on experience with one or more of the following: Visual Studio or Eclipse, Bugzilla or Jira, Hudson, Jenkins, or Cruise Control. Archer, SAML/SSO, VMware Databases, Command Shell scripting. Client requirement gathering, prioritization and scoping experience. Strong technical writing skills. Strong oral communication skills in English and good presentation/teaching skills. Excellent problem-solving and organizational skills. Ability to apply these skills cooperatively in a collaborative team environment.Additional Skills & Experiences: Familiarity with CVSS, CWE, OWASP, WASC and SANS-25.Experience with source code analysis and interactive application security testing products. Understanding of common risk mitigation practices and technologies such as firewalls, ACLs and multi-factor access controls. SaaS, Professional Services and/or professional Training/Mentoring experience also desired.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.

Careers

Veracode was founded by world-class security experts - and it continues to attract top problem solvers in the industry. We take pride in the diverse and electrifying culture our employees create. With personnel located across the United States and around the world, we boast a new and exciting approach to how we do business. Our collaborative environment fosters learning and growth within our employees through friendly discussions, hackathon projects and everyday interactions.

At Veracode, we offer a fundamentally different approach to application-layer security - one that's simpler and more scalable than legacy on-premises approaches. Our subscription-based service combines a powerful, cloud-based platform with deep security expertise and best practices for managing enterprise-wide governance programs so that enterprises can speed their innovations to market - without sacrificing security. It's all of these things combined with a little food and a lot of fun that make Veracode a great place to work.