Job Title: Application Engineer
Location: Burlingame CA
Job Description:
- 8 years of combined experience in software development security engineering and security regulatory and compliance with at least 5 years of experience in security engineering
- Strong understanding of security principles threat modeling and risk assessment
- Experience with secure coding practices vulnerability remediation and security testing
- Familiarity with regulatory requirements for medical devices (e.g. FDA CE)
- Experience with mobile application security domain and issues (both Android and iOS)
- Experience with embedded systems/IoT devices a plus
- Should be handson with Open Web application security project OWASP procedures
- Handson with Static code analyzer tools like Valgrind to trace Buffer overflow Stack overflow memory leaks API testing
- Handson with code reviews to identify potential issues
- Fluent with code injection attacks SQL NoSQL OS command Object Relational Mapping (ORM) LDAP and Expression Language (EL) or Object Graph Navigation Library (OGNL) injection
- Identify risks during firmware update
- Identify risks in Cryptography signature
- Able to guide and handson with Toolchain hardening
- Able to identify Identity and Access management attacks
- Data collection storage privacy
- Transport layer security
Threat Modeling:
- Identifying all assets in a system
- creating an architecture overview
- Decomposing the system (or device)
- Identification of threats
- Document all the threats with their respective scenarios
- Rate each threat by its likelihood as well as impact using a rating system
Education:
- Bachelors degree in computer science Cybersecurity or related field.