Senior Application Security Engineer
Position Overview
iManage is rapidly growing and so is the Application Security team. In this role, the engineer will guide the R&D and other engineering teams on security considerations as well as improve application security at iManage. Our focus is to ensure our developers are shipping secure code.
Key Responsibilities
- Conduct architecture reviews/threat modeling of critical engineering proposals
- Advise and direct improvements in software maturity (using SAMM or similar model)
- Understand and direct improvements to software security QA/QE processes
- Oversee, validate, and improve security testing (Pen Testing, DAST, static code analysis)
- Vulnerability research and proof of concept exploit code development
- Work with engineering to resolve security issues
Requirements
- Bachelors in CS/Engineering or equivalent is required
- Minimum 3 years’ experience in implementing security requirements within SDLC
- A history of uncovering, exploiting, and remediating application or system security flaws
- A deep understanding of software engineering and web development
- Experience building tools and processes to reliably identify security issues and logic flaws across large code bases
- Experience with microservice architectures, or large distributed systems
- Expertise with browser security controls and web application security best practices
- Experience working with operational or DevOps teams
- Experience communicating security concerns and issues to non-technical audiences
- Knowledge of and experience with manipulating protocols and libraries in order to compromise the security of a set of systems or code
- Previous work as a developer for a large code base and collaboration with engineers
- Experience working on open source projects and are familiarity with different styles of source control workflow and continuous integration is a plus
About iManage
iManage transforms how professionals in legal, accounting and financial services get work done by combining the power of artificial intelligence with market leading document and email management. iManage automates routine cognitive tasks, provides powerful insights and streamlines how professionals work while maintaining the highest level of security and governance over critical client and corporate data. Over one million professionals at over 3,000 organizations in over 65 countries – including more than 2,000 law firms and 500 corporate legal departments – rely on iManage to deliver great client work.
Learn more at: www.imanage.com