Lead Application security engineer

Capillary technologies is an enterprise-grade SaaS technology provider. We operate in the loyalty domain where we help our customers to better engage their users to enhance their business outcomes.

To provide assurances to our customers, we comply with ISO 27001, PCI & SOC 2 type standards from information security perspective. On privacy front, we comply with Data Privacy laws of the countries (like GDPR, CCPA, etc) where we provide our services.

We are looking for a Lead, Application Security who can drive the application security function to next level resulting in enhanced security of our product

Job responsibilities :

• Perform design consultation, architecture review, threat modeling, code review, and testing.
• Assist in the development of test cases, scripts, procedures for automated security testing as part of CI / CD pipeline
• Perform application vulnerability assessments
• Analyze output from security tooling and provide guidance to drive remediation
• Be part of SDLC processes and provide guidance on increasing security review coverage
• Identify toolsets and vendors, drive adoption and implementation
• Consult with development and QA staff to remove false positives and prioritize remediation based on security scanning tools output.
• Perform tasks related to securing and maintaining the security of applications, tools, and processes.
• Understand industry trends, best practices and look at their implementation in Capillary

Skills And Expertise