Application Security Engineer Lead

col-wideJob Description:

Responsibilities
:Performing security source code analysis.
Analyze application vulnerabilities and provide mitigation strategies.
Researching, designing, and writing application security rules for detection, while working closely with a development team for SAST
Analyzing different programming frameworks in different programming languages for potential sources and sinks for SAST.
Handling complex cases escalated from the field and other teams.
Improving Mend SAST engines for various programming languages.
Requirements:
Experience with security review of source code –Must!
At least 5 years of experience in application security or security research, including the understanding of application security attacks, vulnerabilities, and mitigations-Must!
Understanding at least 2-3 of the following programming languages -Java, C#, Go, JS, Python, PHP, Ruby, etc-Must!
Language agnostic approach to vulnerability identification in the source code (ability to read multiple programming languages source code and identify vulnerable parts).
Knowledge of common Web Application security vulnerabilities (OWASP TOP10, SANS 25, etc.)
Proven experience leading tasks and projects end-to-end, passion to grow to a TL position
Excellent English – written and verbal.
Excellent interpersonal and communication skills.
Advantages:
BSc or BA in Computer Science or a similar degree
Experience in managing application security engineers
Experience working with development teams.
Experience withbug bountyresearch or published advisories or exploits for discovered 0day vulnerabilities in applications.
Mend's Diversity Commitment
At Mend, we believe bringing together the diversity of experience and background creates a better place to work, a better product, and more opportunities to innovate. Mend is committed to doing its part to mend the equity gap, fostering a safe, inclusive environment to inspire and support employees to be their authentic selves and provide development opportunities for all.