Diligent

About Diligent

The Company Diligent is the pioneer in modern governance. We empower leaders to turn governance into a competitive advantage through unparalleled insight and highly secure, integrated SaaS applications, helping organizations thrive and endure in today’s complex, global landscape. The largest global network of corporate directors and executives, Diligent is relied on by more than 16,000 organizations and 650,000 leaders in over 90 countries. With award-winning customer service, Diligent serves more than 50% of the Fortune 1000, 70% of the FTSE 100, and 65% of the ASX. Our passionate, smart, and creative group of more than 1,000 employees support customers around the globe from offices in New York, London, Washington, DC, Amsterdam, Sydney, Christchurch, and Charlotte, NC. Position Overview The Application Security Engineer will be a member of the Security group and will work closely with Product Design, Software Development, Production Operations, and other members of the Security group to maintain and enhance the security of our mobile, web, and server software applications. This position will primarily focus on the Entities product as a core contributor to that team. Candidates will be working with a development team located in London and also consult with smaller development teams across Europe. They will be working closely with this team to provide security best practices on architectural design, identity management, secret management, and continuous integration/continuous deployment. The ideal candidate will come from a development lead or DevOps background with a strong passion and interest in security. This person should be self-motivated, enjoy security work, and thrive working in a global, dynamic, growing company environment. Key Responsibilities Own vulnerability management and mitigation approaches with product teams Perform threat modeling, secure feature and architecture assessments, security-critical code reviews, and application security testing Document security feature implementations Contribute to security policy, standards, and guidelines related to application security Research emerging technologies and maintain awareness of current security risks Define, implement, and monitor security measures in Diligent Core products Travel to other product teams Required Experience/Skills: Degree in Computer Science preferably with emphasis on Information Security 5+ years of professional work experience in application design and development, 2+ years in application security architecture and design for web and mobile applications Knowledge of security concepts for Internet technologies, architectures, and protocols Knowledge of application software security concepts Experience with mitigating OWASP Top Ten and CWE/SANS Top 25 vulnerabilities Experience with a combination of C#,. NET, Objective C, Swift Experience with project management tools (e.g. JIRA) Experience with code analysis and penetration testing tools Excellent verbal and written communication skills Relevant certification in Application Security or Penetration testing (CISSP, CSSLP, GSSP-x, CEH, GPEN, GWAPT, GMOB, Security+) Awareness of security standards and frameworks relevant to the SaaS industry (e.g. ISO, NIST, CSA) Preferred Experience/Skills: Experience in the CI/CD build systems and best practices, especially TeamCity Experience in identity management and authentication, specifically OpenID Connect and FIDO2 Experience with secret and key management systems (like Vault) Experience with Docker, Kubernetes, and Rancher

Synonyms

Technologies (from Job Ads)

Hiring Locations (10 of 27)

Headquarters

Loading map...

Company Info

Legal Form: Corporation

Company Type: Private

Company Size: 1001 - 5000

Revenue: 0.5 - 1 billion (USD)

Job Ad Metrics

Job Ads found: 3553

Job Ads per Month: 72.5

Hiring Locations: 27

Data Info