Senior Application Security Engineer

WE ARE

SoftServe is a global digital solutions company with headquarters in Austin, Texas, founded in 1993. Our associates work on 2,000+ projects with clients in the USA, Europe, LATAM, and APAC.

Critical Services Center of Excellence (CoE), the subdivision of SoftServe, is a team of highly professional folks, primarily focusing on technology covering software architecture, startups, and enterprise technologies. SoftServe transforms business through various levels of security assessment, creating and executing threat scenarios, identifying security risks, and filling the gaps.

By analyzing, designing, and implementing security-related controls, we improve the security state of many clients. We have a proactive approach while consulting our clients on security management and analyzing the entire infrastructure on multiple layers. In this way, we design an efficient security strategy following the security standards (ISO27k, CIS Benchmarks, NIST, SOC2, HIPAA, PCI DSS, etc.) and considering the client’s short- and long-term goals.

Our comprehensive solution provides exceptional visibility of analyzed security risks, complies with international standards, helps to pass compliance certification audits, and gives instructions to achieve the desired level of data protection. As a part of the SoftServe Cybersecurity team, we provide reliable security solutions identify security gaps, and guide clients through each step of the improvement process.

Being experts in a range of technologies, we find the approach fits different clients’ needs best in terms of security. We work with experts in application security, security engineering, and governance risk and compliance. Cybersecurity team members are located in Poland, Ukraine, Spain, and other European countries.

IF YOU ARE

• An expert with 4+ years in cybersecurity testing
• Experienced in web application testing
• Skilled in reverse engineering
• Knowledgeable in mobile application security
• Proficient in cloud infrastructure security
• Adept at binary exploitation
• Familiar with on-premise network security
• Experienced in DAST, SAST, and IAST
• Participated in Red Team exercises
• Proven in research and identifying security vulnerabilities in platforms and applications
• Knowledgeable of global standards such as OWASP Top 10, SANS 25, NIST, and PTES
• Certified with security certifications such as CISSP, CISA, CEH, OSCP, OSCE, or other relevant information security certifications
• Fluent in English at an upper-intermediate level and comfortable in a multicultural environment
• Exceptional in both verbal and written communication, capable of leading and influencing virtual teams

AND YOU WANT TO

• Provide security consulting services in the cybersecurity professional team to investigate and mitigate security threats in companies around the world
• Gain experience in the latest cybersecurity practices and solutions
• Improve and develop the cybersecurity discipline in practice
• Hold negotiations with clients to understand business and technical requirements
• Promote cybersecurity services to clients
• Participate in cybersecurity pre-sales activities

TOGETHER WE WILL

• Work with world-leading companies on a wide range of projects with different types of needs and requirements
• Work towards giving you a highly independent position with total ownership and accountability, but also support when needed
• Get a great deal of learning and development opportunities along our structured career path
• Develop your cybersecurity skills, leadership, communication, and negotiation skills
• Have access to strong educational and mentorship programs