1 day ago
Base Salary
$165k - $205k/yr
Responsibilities
- Create best practices, metrics, and mechanisms to improve security testing methodologies within the software development lifecycle.
- Assess emerging threats, compliance changes, and organizational risk, and develop mitigation and compliance plans.
- Provide vulnerability remediation guidance across application, cloud, infrastructure, platform, network, data, and API security perspectives.
- Develop and communicate security training for engineering teams and security champions.
- Communicate application and deployment-environment security posture to internal teams and customers.
- Mentor team members and collaborate with global engineering teams on continual security improvement.
- Support threat modeling, architecture reviews, code reviews, cloud assessments, data security assessments, runtime and event security, and red team, blue team, and purple team activities.
Requirements
- Bachelor’s degree or higher in computer science or a related field.
- 7–10+ years of relevant work experience.
- Extensive experience with SAST, SCA, DAST, host and container security, IaC, platform security, manual penetration testing, cloud configuration, network security, data security, API security, and software security processes.
- Extensive experience improving security testing methodologies through best practices, metrics, and supporting mechanisms.
- Proven understanding of multi-tier web application architecture patterns and extensive experience with software development practices, tooling, and technologies.
- In-depth understanding of OWASP Top 10 risks, including injection, XSS, and CSRF.
- Understanding of data classification and data security control implementations.
- Extensive experience with common cloud security controls and best practices.
- Experience measuring software security programs using BSIMM, SAMM, and ASVS frameworks.
- Strong communication, collaboration, mentoring, risk assessment, threat modeling, and vulnerability triage capabilities.
Benefits
- Hybrid work policy with in-office presence on Tuesdays and Thursdays, plus flexible working hours.
- Market-competitive salary process, annual performance-based bonus, and comprehensive Health, Vision, Dental, and Life Insurance.
- 401(k) retirement savings plan with company matching up to 4%.
- Enhanced parental leave with 20 weeks of fully paid primary leave and 10 weeks of fully paid secondary leave.
- Flexible time off policy and multiple company wellness days each year.
- Access to RethinkCare, LinkedIn Learning, and interactive Microsoft courses and training.
- Modern open-plan workspace with gaming area, free snacks and drinks, regular social events, and an inclusive team culture.
Categories
About iManage
iManage builds a cloud-enabled knowledge work platform for law firms, corporate legal departments, and professional services, combining document and email management with search, governance, and AI. It sells enterprise software via subscriptions and managed cloud, with products such as iManage Work, iManage Share, and the Ask iManage generative assistant to organize and understand business content. Founded in 2015 and headquartered in Chicago, it is privately held and serves customers globally in regulated industries.