Senior Information Security Engineer

Our Mission – Securing the software that powers your world. At Veracode, we are focused on that mission every day. Veracode is recognized as a premier provider of SaaS-based application security solutions, transforming the way companies secure applications in today’s software driven world. We provide our customers with a solid foundation on which to build security into their modern agile development processes.

Summary:

Veracode is seeking a highly-motivated, detail-oriented individual to join our Information Security team. As a leader in the Application Security community, our customers rely on us to deliver a world-class platform in a highly secure fashion. In this role, you will have the opportunity to help secure, scale, and defend our products and infrastructure, ensuring our customers are protected.

Responsibilities include:

• Strengthen Veracode’s end-to-end Security Operations from both a technical and process perspective
• Improve our ability to Prevent, Detect, and Respond to security threats
• Drive implementation, adoption and advanced use of security tools and best practices tailored to employee workstations and infrastructure running in AWS
• Create and implement security-as-code solutions within CI/CD pipelines to automate deployment
• Respond to escalated security incidents as a member of the Incident Response Team
• Experience & Desired Skills
• Proven ability to think both strategically and tactically, switch between contexts quickly, and be able to architect solutions for both
• Clear and concise communication, documentation, and report writing skills
• Demonstration of continuing ability to self-teach
• Endpoint Security
• Detections Engineering – writing detections to catch malicious actors using either proprietary formats or open standards like YARA
• Experience with HIDS/EDR tools like Crowdstrike Falcon, OSSEC, etc.
• Knowledge of TTPs used by sophisticated attackers and how to defend against them
• SIEM
• Security Analytics and Threat Hunting using common tools like Splunk, Elasticsearch, etc.
• SOAR (Phantom, Cortex XSOAR, Swimlane, etc.) and/or security automation skills (Python and PowerShell preferred)
• Security log management
• Incident Response
• Developing security incident playbooks and processes
• Forensics
• Malware analysis
• Cloud Security
• Office 365 Security
• Using Okta to secure access to SaaS applications
• DLP: especially cloud-based solutions such as Netskope

The Veracode Way:

We Have a Passion and Commitment for Security

We consider security in everything we do. We act to preserve the trust our customers place in us.

We Help Our Customers Change the World

We deliver peace of mind to our customers so they can focus on the pursuit of their missions.

We Have Big Goals and Expect Big Outcomes

We are results driven. We take risks, compete boldly, and deliver valuable outcomes to our customers.

We Are Committed to Making Progress Together

We collaborate with each other, our user communities, our industry and together lead the world forward.

We Value Each Other

We value diversity. We have empathy for each other and assume positive intent.

We Are Proud to be Veracode

We have fun together. We honor who we are and work hard to achieve our potential.

More About Working at Veracode:

Veracode, is a leader in helping organizations secure the software that powers their world. Veracode’s SaaS platform and integrated solutions help security teams and software developers find and fix security-related defects at all points in the software development lifecycle, before they can be exploited by hackers. Our complete set of offerings help customers reduce the risk of data breaches, increase the speed of secure software delivery, meet compliance requirements, and cost effectively secure their software assets- whether that’s software they make, buy or sell.