myGwork - LGBTQ+ Business Community · 1 week ago
GenAI Lead Application Security Engineer
Wonder how qualified you are to the job?
Maximize your interview chances
Internet
Insider Connection @myGwork - LGBTQ+ Business Community
Responsibilities
Provides architectural guidance on best practices regarding security in software development, shared services, user interface design frameworks, high performance messaging solutions, server-side development, integrations, tools and technologies
Drives and guides the specification and realization of a security architecture, with decisions driven by balancing security risks faced by the business along with customer or market requirements
Develops repeatable application security patterns to ensure that systems are placed within the relevant security zones based on the data they house and their purpose
Consults and assists with security incident response process
Guides development and SRE teams in building secure Cloud Native applications by incorporating Cloud and Microservices Security best practices and industry standards
Qualification
Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.
Required
Bachelor’s degree in Computer Science, related field or relevant work experience
6 or more years of progressive related experience in Security engineering roles
Demonstrated programming expertise – Java, Python
Demonstrated subject matter expertise in Application Security, Web services security, GenAI/LLM security
Experience with threat modeling, risk analysis and control design
Experience architecting and leading security for Cloud native applications
In depth knowledge of network security, authentication and authorization
Advanced understanding of vulnerability exploitation chaining, and vulnerability remediation
Demonstrated expertise in product/application security architecture – Service oriented architecture (SOA), Network security, application security, web services, Angular, JavaScript
Security audit, Vulnerability assessment and packet analysis skills
TCP/IP stack knowledge, Encryption expertise, TLS, DTLS, ECC, PKI/Certificates
Identity & Access Management: AD/LDAP
Preferred
Exposure to the Agile SDLC process
Security Forensic analysis skills
Knowledge with AWS cloud architecture, and virtualization technologies, such as Containers, EKS, Kubernetes, and VMware
Experience performing threat modeling and design reviews to assess security implications and requirements
Experience in defining and documenting security reference architectures and standards
Experience with automation tools associated with DevOps and CI/CD pipelines, and with security integration into CI/CD
Familiarity with SAST/DAST/SCA tools like Fortify, Whitesource
Database, datalake knowledge – Postgres, Oracle, Databricks, Snowflake
Familiarity with Secure SDLC frameworks such as NIST SSDF, OpenSAMM/BSIMM
Hands on experience with AI technologies and services (e.g., ChatGPT, Bedrock, etc.)
Expertise in the security of Gen AI models, including multi-modal models
Experience with the security of automation built around Gen AI inputs and outputs
Benefits
Health care coverage
Generous time off
Access to resources for career growth
Retirement planning
Financial wellness programs
Family-friendly perks
Retail discounts
Referral incentive awards
Company
myGwork - LGBTQ+ Business Community
myGwork is the largest global platform for the LGBTQ+ business community.
Funding
Current Stage
Early StageTotal Funding
$4.77MKey Investors
24 HaymarketInnovate UK
2023-08-17Series Unknown· $1.66M
2023-08-17Grant· Undisclosed
2021-12-07Series A· $2.12M
Recent News
2024-04-10
Company data provided by crunchbase