What are the responsibilities and job description for the Product Security Engineer position at Software Guidance & Assistance?
Software Guidance & Assistance, Inc., (SGA), is searching for a Product Security Engineer for a contract assignment with one of our premier SaaS clients in San Jose, CA or Mclean, VA. This role is open to remote in these locations.
The ideal candidate should have over 4 years of experience in vulnerability management. He or she will use their expertise to make consistent risk-based decisions when partnering directly with engineering product teams to manage their vulnerability backlog and risk hygiene.
Responsibilities:
SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .
SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.
The ideal candidate should have over 4 years of experience in vulnerability management. He or she will use their expertise to make consistent risk-based decisions when partnering directly with engineering product teams to manage their vulnerability backlog and risk hygiene.
Responsibilities:
- Act as the technical security point-of-contact when partnering directly with engineering product teams
- Strategically prioritize the risk reduction of vulnerabilities
- Drive vulnerabilities to remediation within SLA
- Act as the lead security contact during incidents
- Own metrics and escalations, such as Time-To-Remediation and SLA adherence, to ensure visibility of engineering product team's risk posture
- Identify and implement strategic improvements and paved road solutions to improve resiliance
- Vulnerability Management / Triage
- Vulnerability Risk Assessment
- Vulnerability Incident Response
- Knowledge of application security vulnerabilities (OWASP Top 10) and mitigation techniques
- Knowledge of infrastructure vulnerabilities, mitigation techniques, and tooling (e.g. Spotlight Crowdstrike, Rapid7 Nexpose)
- Dependability: Meets commitments, works independently, accepts accountability, handles change, sets personal standards, stays focused under pressure
- Strong understanding of common security concepts that support root-cause analysis to make data-driven decisions on vulnerability patterns and trends
- Ability to speak and communicate professionally
SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .
SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.