Katalon

Overview of job

Founded in 2016, Katalon is the leading provider of a modern, comprehensive quality management platform. Katalon Platform enables quality assurance, DevOps, and software teams of any size to deliver world-class customer experiences faster, easier, and more efficiently.

Since its first launch, Katalon has experienced tremendous growth, serving more than 30,000 teams around the globe, many of which are in the Fortune Global 500, such as PwC, KPMG, Abbott, etc. Katalon is recognized as a top automation tool by prestigious review sites, such as G2, Gartner, Capterra, and IT Central Station. 

ABOUT POSITION

We are looking for a Senior Application Security Engineer who thrives working with engineering teams to secure their products across the entire software development lifecycle.

Key Responsibilities:

• Participate in and support application security reviews and threat modelling, including code review and dynamic testing;
• Perform application security vulnerability management;
• Support the Vulnerability Disclosure Program;
• Facilitate and support the preparation of security releases;
• Support and consult with the product and DevSecOps teams in application security;
• Assist in the creation of application security training;
• Assist in the development of automated security testing to validate that secure coding best practices are being used;
• Source code auditing;
• Reviewing new features and architectural designs;
• Empower engineering teams to build secure software by default;
• Assist in Penetration Testing both internally and externally.

• BSc in Computer Science or related or 3+ years of experience;
• Relevant information security certificates (CEH, CEPT, OSCP, CMWAPT,  GIAC GWEB, CSSLP, CCSP, etc.);
• Strong ability to work with colleagues to understand our products and then come up with ways to improve existing security infrastructure;
• The ability to read and understand code is very important, key languages include: Java, JavaScript, Python, etc.
• Experience with Penetration testing tools and Devsecops tools such as SonarCloud, Snyk, and Burp Suite;
• Solid understanding of web application security ( Web Pentest). Penetration Testing experience is a plus;
• Experience in cloud security architecture and infrastructure (AWS is preferred);
• Experience coding in at least one scripting language;
• Able to reason about security decisions;
• Experience leading projects from start to finish and mentoring other security practitioners;
• An ability to communicate ideas clearly and effectively to engineers who know way more than you about their code;
• Familiarity with common security libraries, security controls, and common security flaws;
• Experience with OWASP, static/dynamic analysis, and common security tools;
• A basic understanding of network and web-related protocols (such as TCP/IP, UDP, HTTP, HTTPS, protocols);
• Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner;
• Experience identifying security issues through code review.