id: NDk4NTkzOSA3

reference: 4985939

documentId: 4985939

connectionPointId: 7

lastModificationDate: 1557318606280

stillingsbetegnelse:
Experienced Security Analyst/Engineer, Product Security Incident Response Team (PSIRT)

jobbeskrivelse:

Are you an experienced software engineer who demonstrates interest and passion towards security? Then this might be the perfect job for you.

You will be part of a new Product Security Incident Response Team (PSIRT) that owns the Milestone product vulnerability management process for on-premise, cloud services and appliances. In this team we coordinate, triage and fix internally and externally reported product security incidents. 

You will join the global leader in Video Management Systems to secure our software products. Here, you and your colleagues work with development, maintenance and continuous improvement of product security that help manage risks, protect people and assets, optimize processes and reduce costs. Welcome to the open platform company! 

Besides having deep knowledge of common classes of product security vulnerabilities and attack/defense methodologies, your role also requires excellent communication skills as you will be working closely and liaising on daily basis with many stakeholders from different departments in the company. This would include people from customer support, product management and product marketing, engineering and sustaining engineering teams and others to drive issues to closure.

 

Responsibilities:

• Lead and own the vulnerability management process – triage and fix security related issues and verify those

• Provide architectural guidance and leadership on best practices regarding security in software development

• Drive our security development lifecycle, including early engagement with development teams to ensure that security is incorporated into products and services from start

• Design and build proof of concept prototype solutions

• Leverage attack tools to test software for security vulnerabilities

• Evaluate new technologies and processes that enhance security capabilities

• Facilitate meetings, workshops, training and education to development teams

• Continuous improvement of testing processes and methodologies

   

Education & Experience:

• You hold a master’s degree or higher in computer science or similar

• You have experience working with security aspects of software design, development and testing

• Extensive knowledge and hands-on experience in .NET technologies and .NET security

• Experience with product and application security, including network security, application security, SOAP and RESTful services, SSO, OAuth/JWT, Windows operating systems and vulnerability assessment

• Experience performing threat modeling and design reviews to assess security implications

 

Skills & Competencies:

• Strong C# skills

• Proficient skills in C++ is preferred.

• Excellent English written and verbal communication skills

• Good understanding of Windows operating systems, software vulnerabilities and exploitation techniques.

• Have a curiosity and interest for security as well as technology in general

• Able to demonstrate to developers how to use the application security components to mitigate security vulnerabilities in applications, services, and databases.

 

We also expect you:

• To actively develop your knowledge and skills within the software industry and always strive at being on top of new software security trends and technologies

• You possess a solid ability to build relationships and create trust with both internal and external stakeholders

• As a person, you have a strong quality mind-set

• Ability to track and lead numerous parallel activities

• You are open for new ideas and embrace changes

• You display initiative and drive

• Handle change well as we are working in Scrum teams in an agile environment

  

Application and contact

• To apply for this position, click the Apply button and apply by submitting your cover letter CV in English no later than end of May 2019. If you have questions about the job, please contact PSIRT Manager, Carsten Bøgelund via email: cb (at) milestone.dk

numberOfPosts: 1

jobCategoriesCodes_0: http://data.europa.eu/esco/isco/C2511

abstractJV_contact_0: Please apply using one of the specified channels

positionTypeCode: directhire

contractTypeCodes_0: fulltime

Arbejdsgiver Navn: MILESTONE SYSTEMS A/S

source: DK-STAR