Lead Application Security Engineer

Role Description

The individual in this position will be a key contributor to DevSecOps and overall application security initiatives in Ellucian.

• Analyze the security of Ellucian applications and coding practices using a variety of tools and frameworks.
• Perform manual and automated application penetration testing.
• Provide guidance to development teams for remediating application security vulnerabilities.
• Develop innovative new DevSecOps solutions to application security problems.
• Act as an evangelist for DevSecOps and application security within Ellucian.
• Create and deliver application security training for product owners, business analysts, test engineers and developers.
• Lead ongoing process and policy improvement efforts.
• Provide mentoring to members of development teams.
• Conduct ongoing research of trends in application security practices, tools and utilities.

Qualifications

• A strong passion for application security.
• Extensive skills and experience performing application security / penetration testing using manual and automated tools including AI.
• Progressive application security and software development experience.
• Demonstrated technical skills, especially in the areas of enterprise application security, AI security testing, and secure development practices.
• A thorough understanding of OWASP application security tools, code libraries and documentation.
• Experience developing automated solutions to application security problems.
• Demonstrated ability to clearly communicate complex ideas verbally and in writing.
• Excellent troubleshooting, problem-solving, and analytical skills.
• Ability to occasionally work off-hours or extended hours in support of various projects.

Requirements

• Preferable experience of 7+ years in performing manual and tool driven penetration testing for web apps, APIs.
• Exposure to and understanding of DevOps principles and tools.
• Experience securing Cloud applications in AWS.
• Application security certification such as CSSLP, GIAC GWAPT or similar.
• Experience developing secure web and mobile applications and REST APIs.
• Experience remediating application vulnerabilities.

Benefits

• Comprehensive health coverage: family major medical expenses, dental and life insurance.
• Christmas bonus 30 days.
• Saving fund.
• Monthly food coupon.
• 15 workdays vacation.
• Thrive Flex Program that allows you to contribute towards your health, financial or learning interests.
• 5 charitable days to support the community that supports us.
• Diversity and inclusion programs that promote employee resource groups such as: Women in Technology, Pride and Go Green to name a few.
• Parental leave.
• Employee referral bonuses to encourage the addition of great new people to the team.

Company Description

Ellucian powers innovation for higher education, partnering with approximately 3,000 customers across 50 countries, serving more than 21 million students.

Ellucian's AI-powered platform drives efficiency, personalized experiences, and strengthened engagement for all students, faculty and staff.

These solutions and services span the entire student lifecycle, including data-rich tools for student recruitment, enrollment, and retention to workforce analytics, fundraising, and alumni engagement.