TripleLift - Senior Application Security Engineer - NIST

About TripleLift :

We're TripleLift, an advertising platform on a mission to elevate digital advertising through beautiful creative, quality publishers, actionable data and smart targeting.

Through over 1 trillion monthly ad transactions, we help publishers and platforms monetize their businesses.

Our technology is where the world's leading brands find audiences across online video, connected television, display and native ads.

Brand and enterprise customers choose us because of our innovative solutions, premium formats, and supportive experts dedicated to maximizing their performance.

As part of the Vista Equity Partners portfolio, we are NMSDC certified, qualify for diverse spending goals and are committed to economic inclusion.

The Role :

TripleLift is seeking a Senior Application Security Engineer to join our team full-time.

We are an established company in the advertising technology sector, trying to tackle some of the most challenging problems facing the industry.

You will be joining a rapidly growing and complex environment and will work as part of a small team that will be responsible for developing, evangelizing, and executing our security roadmap.

Youll help drive improvements in our security operations capability and support critical projects, enhancing our detect-and-respond capabilities.

Responsibilities :

• Play a critical role in building and maintaining a global security compliance program based on NIST CSF.
• Scale application security by developing automated security testing utilizing enterprise SAST, DAST, and code-review tools.
• Champion SDLC to promote secure application development and infrastructure deployment and facilitate secure coding remediation activities.
• Automate security testing in CI / CD pipelines to detect vulnerabilities early.
• Coordinate with stakeholders to develop and implement a vulnerability management program and to perform threat-hunting activities.
• Monitor and respond to application-layer security threats like API abuses, business logic flaws, and common web vulnerabilities.
• Collaborate with product and engineering teams to ensure security is a key consideration in software design and architecture.
• Enhance application security posture by working with cross-function teams to implement proper authentication, authorization, and data protection mechanisms.
• Enhance and facilitate security incident handling activities.
• Evangelize security best practices and provide education and awareness to company employees.
• Develop and implement secure coding guidelines and conduct secure development training for engineers.
• Evaluate and continuously improve the maturity of the security program through the deployment and management of various security tools and processes.

Desired Skills And Attributes :

(ref : hirist.tech)