Senior Security Engineer

About ArmorCode

ArmorCode is a hyper-growth startup with a line-up of marquee customers that are an envy of even Fortune 500 companies. Our customers range from fast-paced digital native companies to #1 brands across three major global categories. 

ArmorCode provides the industry’s leading AppSecOps platform delivering AppSec at the speed of DevSecOps. Since its founding in 2020 in Palo Alto, California by serial entrepreneurs with a successful track record of starting and growing startups, ArmorCode has won numerous awards including SINET 16, Globee IT & Disruptor Awards, Hot Start-up of the Year award, and the TiE50 Award. ArmorCode was spotlighted on the iconic Nasdaq tower and was included in Gartner's AppSec Hype Cycle under Application Security Orchestration and Correlation tool (ASOC) category.

Application security is one of the fastest growing sub-segments within the fast-growing cybersecurity market, and we are a clear market leader in our category because of the platform-based architecture. In a world that is getting digitally transformed, application visibility and application security posture management are foundational and are a perfect launch pad for long-term career success. At ArmorCode you will find passionate problem-solvers who embody our core values: Hunger, Humility, and Humanity.

Our Product

Agile DevOps, Cloud Deployment, Microservices and Open Source have all dramatically accelerated application delivery and complexity. Today’s AppSec teams depend on a collection of point security products and siloed manual processes. This leaves them struggling to gain the visibility, insight, and process scale they need to identify and protect the always changing and growing application risk surface. This resulting AppSec Chaos means applications ship fast without the assurance of shipping securely, leaving the organization at risk of breaches and losses.

The ArmorCode AppSecOps platform is the solution to this challenge. We provide AppSec teams with the visibility, actionable insight, automation, and integration needed to build, deliver, and scale an effective and efficient AppSec program across the entire organization, as well as the DevSecOps pipeline.

ArmorCode's next-generation AppSecOps is the only platform that consolidates multiple key AppSec needs (Application Security Posture Management, Unified Vulnerability Management, DevSecOps Orchestration, and Continuous Compliance) into a single-pane-of-glass to minimize tooling and alerts while maximizing agility, efficiency, and cost-efficacy. With it, enterprises radically simplify and accelerate their application security while drastically cutting costs. Our platform is loved by global brands & category leaders, backed by leading VC firms, and powered by security experts.

Our Mission

ArmorCode's mission is to help organizations ship software fast and ship it securely, no matter where it is built, how it is built, or who builds it. We invite eager talent ready for this challenge to join our team and power our rocketship.

Job Description

As a Senior Security Engineer, you will play a crucial role in safeguarding an organization's information systems and data against potential security threats. Your primary responsibilities will revolve around monitoring, analyzing, and responding to security incidents, as well as implementing and maintaining security tools and processes. Collaboration with cross-functional teams and staying abreast of the latest security trends will be essential to ensure the organization's overall security posture

Reporting to - Head of Security

What You’ll Do:

• Incident Detection and Response
• Monitor security alerts and events to identify potential security incidents.
• Investigate and analyse security incidents to determine their scope & impact.
• Develop & implement incident response plans to mitigate & contain security breaches.
• Collaborate with other teams to ensure timely & effective incident resolution.
• Security Tool Management:
• Deploy, configure, and maintain security tools such as SIEM (Security Information and Event Management), antivirus, DLP and endpoint detection solutions.
• Conduct regular assessments of security tools and update configurations to optimize their effectiveness.
• Vulnerability Management:
• Perform regular vulnerability assessments & coordinate remediation efforts.
• Stay current on emerging threats & vulnerabilities to proactively address potential risks.
• Collaborate with developers to address security vulnerabilities in systems
• Security Monitoring and Analysis:
• Monitor network traffic for unusual or suspicious activity.
• Analyse logs & alerts from various sources to identify potential security incidents.
• Develop and maintain security event correlation rules to enhance detection capabilities.
• Security Architecture & threat modeling
• Identify & document potential threats to systems and applications.
• Design security controls and countermeasures based on identified threats
• Security Awareness and Training:
• Assist in developing and delivering security awareness training for employees.
• Provide guidance to staff on security best practices and procedures.
• Documentation and Reporting:
• Maintain accurate and up-to-date documentation related to security processes and procedures.
• Prepare and present regular reports on security incidents, trends, and the overall security posture to management. 

Qualification and Experience Requirements

• 7 - 9 Years in Application Security, Security Operations, Blue teaming
• BS in Computer Science/MIS (or equivalent education/work experience)
• Industry standard security certification (CISSP, CISM, OSCP, AWS Security Specialty)
• Excellent written, verbal communications skills, listening and interpersonal skills
• Well organized strong problem analysis and decision-making ability.
• Experience with AWS cloud security standards, configurations and tools
• Good knowledge of IT Security and compliance 

What We Offer

In addition to a competitive compensation package for this role, candidates will have an opportunity to directly and significantly influence application security space, and diversify skill sets by taking on new and exciting challenges.

• Competitive salary and bonus
• Stock options
• Medical Insurance
• Work from home Remote flexibility – Based in India