AppSec Engineer II

Stack

Responsibilities

• ▹Manage and enhance application security tools: static code analysis, open source vulnerability tools, dynamic application security tools and integrations
• ▹Validate discovered vulnerabilities using code review skills and manual/semi-automatic tooling like Burp
• ▹Validate external penetration test results and work with internal and external stakeholders
• ▹Perform security penetration tests on web and mobile applications and infrastructure
• ▹Work with engineering and security teams to provide actionable reporting and metrics
• ▹Assist in creating and updating application security procedures, policy and standards
• ▹Train, coach and mentor other members of the team, development and the broader security and engineering organization

Requirements

• ▹Understanding of software security architecture and design
• ▹Broad experience in information security and AppSec testing techniques
• ▹Practical experience in an application security role with manual testing
• ▹Solid understanding of cloud environments, especially GCP, web protocols, weaknesses and vulnerabilities
• ▹Good working knowledge of current IT risks, testing, exploitation and mitigation techniques
• ▹Working knowledge of one or more of: Shell, Java, Python or Node.js
• ▹Experience developing automation and exploitation scripts

Soft skills

About the company

LivePerson (NASDAQ: LPSN) is the global leader in enterprise conversations, whose award-winning Conversational Cloud platform is used by brands like HSBC, Chipotle and Virgin Media, powering nearly a billion conversational interactions every month.