Senior Security Engineer

| Greater Boulder Area | Remote | Hybrid
Sorry, this job was removed at 11:06 a.m. (MST) on Monday, August 30, 2021
Find out who's hiring in Greater Boulder Area.
See all Cybersecurity + IT jobs in Greater Boulder Area
Apply
By clicking Apply Now you agree to share your profile information with the hiring company.

About us:

LogRhythm, a Thoma Bravo company, empowers more than 4,000 customers across the globe to measurably mature their security operations program. LogRhythm’s award-winning NextGen SIEM Platform makes the world safer by protecting organizations, employees, and customers from the latest cyberthreats. It does this by providing a comprehensive platform with the latest security functionality, including security analytics; network detection and response (NDR); user and entity behavior analytics (UEBA); and security orchestration, automation, and response (SOAR). Learn how LogRhythm empowers companies to be security first at logrhythm.com.

Who we are looking for:

LogRhythm is seeking a Senior Application Security Engineer to assist our team in shipping secure products. This role will have a significant focus on penetration testing and remediation. You will help ensure that LogRhythm products adhere to corporate and product certification requirements, securing LogRhythm’s development and production environments, and protecting customer data.

You will perform application security assessments, penetration testing, threat modeling, and code reviews. You will also deliver security training for developers, and generally raise developer awareness of security best practices. You will work cross functionally with your peers in the engineering organization. 

Here’s an overview of the responsibilities & challenges ahead:

  • Perform manual and automated security assessments (e.g. pen testing, code reviews, vulnerability scanning, etc.) to drive measurable security improvements in LogRhythm’s products. Review assessment reports and coordinate with engineering to ensure findings are remediated.
  • Assist in implementing automated DevSecOps practices into product CI/CD pipelines and cloud environments.
  • Be an active participate in advocating for and improving security throughout the SDLC.
  • Provide training and mentorship on secure coding best practices to engineering team members.
  • Consult with development and operations teams to provide mentorship and recommend secure design patterns.
  • Remain ahead of emerging and active threats: leverage pen testing tools, develop custom offensive and defensive tools, review and apply the latest security research / threat intelligence.

Required skills, background, and experience:

  • Bachelor’s degree in Computer Science or related field.
  • 5+ years experience in Application Security
  • Experience with penetration testing web-based SaaS applications and systems operating out of Cloud infrastructure (AWS, GCP, Azure, etc.).
  • Experience in secure coding best practices and security code reviews in at least one of the following: Java, JavaScript, Go, C#, Python. 
  • Knowledge of application-level attacks and mitigation methods, with a thorough understanding of OWASP top 10.
  • Knowledge of DAST, SAST, 3rd party dependency, and container image security scanning.
  • Understanding of compliance standards and how they impact software products and cloud operations.
  • General security and offensive security assessment certifications a plus: CISSP, CEH, OSCP, GPEN, etc.
  • Contributions to the security community a plus: research papers, public CVEs, conference talks, open source, etc.

Salary and Other Compensation      

  • The annual starting salary for this position is between $120,000-150,000  depending on experience and other qualifications of the successful candidate.

Benefits:

  • LogRhythm offers the following benefits for this position, subject to applicable eligibility requirements.
  • Medical
  • Vision
  • Dental
  • HSA
  • FSA
  • 401k plan
  • Flexible time off
  • Employee assistance program

Additional Information

  • Created:/ Revised Date:  May 10th, 2021
  • Reporting to: - Director of Security
  • Location: - Boulder, Colorado (will consider US remote working)
  • Employment Status: - Full Time
  • FLSA/ Applicable State Law Status- Exempt

Workplace equality & inclusion are not just words or topics for LogRhythm, they are part of our core values, beliefs, and integral to our company culture. We hire the best of the best and do not discriminate based on race, gender, age, religion, sexual orientation, identity, or other personal factors. LogRhythm was built on the principals of innovation, dedication, creativity, and commitment. It is through these key areas we were able to grow as an equal and inclusive workplace, one where our employees feel respected and safe in.

Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. The company reserves the right to modify this information at any time, subject to applicable law.


Read Full Job Description
Apply Now
By clicking Apply Now you agree to share your profile information with the hiring company.

Technology we use

  • Engineering
    • GolangLanguages
    • JavaLanguages
    • PythonLanguages

Location

385 Interlocken Crescent #1050 , Broomfield, CO 80021

What are LogRhythm Perks + Benefits

LogRhythm Benefits Overview

LoGiving- We are dedicated to giving back and empowering our employees, customers, and communities.

Employee referral program- We know the best people know the best people.

Health- Benefits include top-of-the-line health insurance and a generously funded HSA.

Work life balance- We mean it. Flex time off, 12 sick days, 9 company holidays and company-sponsored volunteering opportunities. Oh and take your birthday off — it’s policy.

Culture
Volunteer in local community
Our employees participate in a number of volunteer activities every year, such as the Pedal 4 Possible charity bike ride and Boulder Open Space cleanups.
Partners with nonprofits
Every year, we run donation drives for Coats for Colorado and Community Food Share. We also participate in a number of other activities organized by our Logiving committee.
Open door policy
OKR operational model
Team based strategic planning
Flexible work schedule
LogRhythm provides employees with a flexible work schedule, including flexible start and end times.
Remote work program
Our remote work program includes full-time remote work for specific positions, as well as the ability for on-site employees to work remotely as needed.
Diversity
Dedicated diversity and inclusion staff
Hiring practices that promote diversity
Health Insurance & Wellness Benefits
Flexible Spending Account (FSA)
LogRhythm employees can contribute up to $2700 annually to their FSA for the 2019-2020 plan year.
Disability insurance
Disability insurance covers 60% of base weekly pay for short-term disability insurance and 60% of base monthly pay for long-term disability insurance.
Dental insurance
Vision insurance
Health insurance
LogRhythm provides health insurance benefits.
Life insurance
Life insurance is offered in $10,000 increments up to $1,000,000 or up to six times annual salary, whichever is less.
Pet insurance
LogRhythm provides access to pet insurance.
Wellness programs
LogRhythm's health and wellness programs include the bi-annual Biggest Logger competition and corporate discounts to certain fitness clubs.
Team workouts
LogRhythm's fitness offerings include an on-site gym, yoga classes, and the bi-annual Biggest Logger competition.
Financial & Retirement
401(K)
Performance bonus
Charitable contribution matching
Child Care & Parental Leave Benefits
Generous parental leave
LogRhythm provides up to 8 weeks of parental leave (and 12 weeks of FMLA) for the primary caretaker and the secondary caretaker.
Family medical leave
Company sponsored family events
LogRhythm offers multiple family-oriented events every year, including Logtoberfest, Bring Your Child to Work Day, and Bring Your Dog to Work Day (DogRhythm).
Vacation & Time Off Benefits
Unlimited vacation policy
Paid holidays
Paid sick days
LogRhythm offers paid sick days.
Office Perks
Commuter benefits
Company-sponsored outings
Company outings at LogRhythm include Logtoberfest and summer happy hours.
Free snacks and drinks
LogRhythm has fully stocked kitchens, including unlimited coffee, tea, soda, and sparkling water. There are also vending machines in each building.
Some meals provided
Company-sponsored happy hours
Happy hours are hosted on occasion .
Onsite office parking
LogRhythm offers employees free on-site parking.
Pet friendly
LogRhythm participates annually in Bring Your Dog to Work Day.
Recreational clubs
LogRhythm sponsors office sports leagues, including softball and hockey.
Fitness stipend
Onsite gym
Professional Development Benefits
Job training & conferences
LogRhythm encourages professional development, including by offering opportunities for on-site and virtual training.
Lunch and learns
LogRhythm hosts lunch and learn meetings for employees throughout the company.
Promote from within
Mentorship program
Our mentorship program includes leadership mentoring.
Online course subscriptions available

Additional Perks + Benefits

Flexible Paid Time Off, Birthdays required off. Yoga and Meditation Classes. Foosball, Ping Pong and Arcade Games.

More Jobs at LogRhythm

Apply Now
By clicking Apply Now you agree to share your profile information with the hiring company.
Learn more about LogRhythmFind similar jobs like this