Vermont Licensed Senior Security Engineer (17)

Summary

Leading application security efforts, the full-time Vermont Licensed Senior Security Engineer will manage the AppSec program across the software development lifecycle, conduct threat modeling, and ensure secure coding practices while working in a remote-friendly environment.Key responsibilitiesOwn and evolve the AppSec program from design reviews to post-deployment monitoring for various product deliverablesConduct threat modeling and architecture security reviews for new features and servicesManage third-party and supply chain security, including the Software Bill of Materials (SBOM) programRequired qualifications5+ years of experience in security engineering with a strong focus on application securityHands-on experience with threat modeling frameworks (e.g., STRIDE, PASTA)Proficiency with common application security tools such as Semgrep, Snyk, and Burp SuiteDeep understanding of web application vulnerabilities and secure coding practicesExperience with software supply chain security and risk management

Job Description

Leading application security efforts, the full-time Vermont Licensed Senior Security Engineer will manage the AppSec program across the software development lifecycle, conduct threat modeling, and ensure secure coding practices while working in a remote-friendly environment.Key responsibilitiesOwn and evolve the AppSec program from design reviews to post-deployment monitoring for various product deliverablesConduct threat modeling and architecture security reviews for new features and servicesManage third-party and supply chain security, including the Software Bill of Materials (SBOM) programRequired qualifications5+ years of experience in security engineering with a strong focus on application securityHands-on experience with threat modeling frameworks (e.g., STRIDE, PASTA)Proficiency with common application security tools such as Semgrep, Snyk, and Burp SuiteDeep understanding of web application vulnerabilities and secure coding practicesExperience with software supply chain security and risk management