Security Application Engineer

2 weeks ago

Denver, United States RingCentral Full time

Security Application Engineer, DAST Scanning (Belmont CA, Denver CO, Dallas TX)


The RingCentral environment is dynamic, success-driven, team-oriented and committed to providing world class service for its customers. Do you have the ability to thrive in a fast-paced environment? We are looking for candidates with an entrepreneurial spark


We're not a phone company; we're a cloud business-solutions provider. We've thrown out the old PBX along with its rigid rules and eliminated the complexity and unnecessary expense of managing business communications the old way.
RingCentral fosters career development and provides leadership training, education, workshops, and coaching for all employees.

RingCentral promotes a healthy work-life balance by providing catered lunch and breakfast on a daily basis as well as a kitchen stocked with a variety of complimentary beverages and delicious snacks.


The RingCentral Application Security team is a part of a larger CISO team. The area of responsibility of the application security team includes enablement and support for RingCentral's Security Development Lifecycle (SDL) program. This includes development of infosec governance artifacts i.e., policies, standards and procedures for secure software development at RingCentral, leading security architecture reviews and threat modelings, developing security requirements, SAST/DAST/SCA testing and integration of these tools into the build and deploy process, penetration testing, managing bug bounty program.


We are looking for a Security Application Engineer with a strong understanding of web and mobile application vulnerabilities, how they can be detected, exploited and remediated.


Responsibilities:
Consult developers on questions related to reports of security scanners*, which includes:
explain why an issue should be considered as a vulnerability
explain circumstances under which an issue might be exploitable
provide suggestions on how an issue can be remediated
Review and validate issues marked as potential false positives by developers; request additional clarifications where required.
Review and improve security scanners configurations:
review scanning rules in presets, make sure that important rules are enabled and irrelevant rules are disabled
make sure security scanners do not miss production code/applications, as well as do not scan testing-only code/applications
where possible and required, adjust scanning rules to improve their accuracy
collaborate with legal to make sure that license violation rules for open source software are configured correctly
Maintain access to security scanners.
Report breached security defects SLA.
Support risk exceptions process for the following cases:
violations of security defects SLA
deviations from security policies/standards (for example, releasing with a higher vulnerability level than defined as satisfactory)
Triage reports from the bug bounty platform, address them to responsible engineering teams
Triage reports from the external attack surface management platform, address them to responsible engineering teams
Maintain security scanners deployed in production environment, which includes:
deploy new versions
patch security vulnerabilities
make sure security hardening benchmarks are met (such as CIS or STIG)
make sure other requirements for production deployment are met (logging, monitoring, backups, etc.)
* - security scanners include, but are not limited to static application security testing (SAST), dynamic application security testing (DAST) and software composition analysis (SCA)

Qualifications:
Technical experience in product architecture, design, implementation
Expertise with product security design, review, implementation including threat modeling and risk assessment implications
U.S citizenship required
Extensive experience with web and mobile application testing- SAST/DAST, penetration testing
Secure design and implementation capabilities
Experience with open-source software including lifecycle management, vulnerability management tools
Excellent communication skills, both verbal and written; ability to condense complicated scenarios into simple, risk-based assessments, appropriately targeted for colleagues and upper management
Outstanding organizational and time management skills, desire to work within a highly collaborative team

Nice-To-Have:
Any WebRTC, Video and audio streaming
Video codecs
B.S. or equivalent in CS or EE

What we offer:
RingCentral offers all the work/life benefits you could ever want, (and none of the micromanagement.)
Comprehensive medical, dental, vision, disability, life insurance
Health Savings Account (HSA), Flexible Spending Account (FSAs) and Commuter Benefits
401K match and ESPP
Flexible PTO
Wellness programs including1:1 wellness coaching through TaskHuman and meditation guidance through Headspace
Paid parental leave and new parent gift boxes
Pet insurance
Employee Assistance Program (EAP) with counseling sessions available 24/7
Rocket Lawyer services that provide legal advice, document creation and estate planning
Employee bonus referral program

RingCentral's work culture is the backbone of our success. And don't just take our word for it: we are recognized as a Best Place to Work by Glassdoor, the Top Work Culture by Comparably and hold local BPTW awards in every major location. Bottom line: We are committed to hiring and retaining great people because we know you power our success.

About RingCentral:
RingCentral, Inc. (NYSE: RNG) is a leading provider of business cloud communications and contact center solutions based on its powerful Message Video Phone (MVP) global platform. More flexible and cost effective than legacy on-premises PBX and video conferencing systems that it replaces, RingCentral empowers modern mobile and distributed workforces to communicate, collaborate, and connect via any mode, any device, and any location.


RingCentral is headquartered in Belmont, California, and has offices around the world. If you are hired in Colorado, the compensation range for this position is between $120,000 and $150,000. If you are hired in Belmont, the compensation range for this position is between $140,000 and $170,000.


RingCentral is an equal opportunity employer that truly values diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We are committed to providing reasonable accommodations for individuals with disabilities during our application and interview process. If you require such accommodations, please click on the following link to learn more about how we can assist you.

  • Sales Engineer/Field Applications Engineer

    4 weeks ago

    Denver, United States High-Tech Professionals Full time

    Sales Engineer/Field Applications Engineer Job ID: 1692 Location: Denver Area Type: Permanent Status: Closed Key Skills: Field applications, sales, industrial electronic products, computer architecture, circuits, operating systems, technical support Description: Job Title: Sales Engineer/Field Applications Engineer Location: Denver area Type: Perm The leader...

  • Senior Security Engineer

    1 month ago

    Denver, Colorado, United States Bank of America Full time

    Job Description:The Information Security Engineer will lead strategic security efforts to expand technology offerings within the Merchant and Small Business technology portfolio. This role will work across various security and technology teams to define, drive, and deliver major security components to meet program objectives. Knowledge and experience with...

  • Web Application Security Analyst

    4 days ago

    Denver, Colorado, United States Fastly Full time

    Fastly helps people stay better connected with the things they love. Fastly's edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers' applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take...

  • Sr. Security Engineer

    8 hours ago

    Denver, United States BridgeView Full time

    Bridgeview is currently seeking a Network Engineer for one of our clients. If you love building and supporting technology solutions that make businesses successful, then read on for more details.TITLE: Network EngineerLOCATION: NE Denver / Aurora, CO – Hybrid 3 days WFH, 2 days onsite COMPENSATION: $60-70 per hourBENEFITS & PERKS: Medical, Dental & Vision...

  • Senior Cloud Security Engineer

    4 days ago

    Denver, United States Datadog Full time

    As a Cloud Security Engineer you will partner with different stakeholders across the organization to secure our cloud infrastructure. We work closely with engineers across various domains of the Datadog infrastructure stack, driving a culture of empowering engineers to have strong security ownership of their products and services through the development of...

  • Network Security Engineer

    2 weeks ago

    Denver, United States Diverse Lynx Full time

    Network Security Engineer Denver, CO (3-4 Weeks Onsite & Then remote) Fulltime Position Infoblox + Palo Alto exp must JD: 7+ years of experience Palo Alto FW's, and Panorama Experience, PCNSE certificate would be added advantage Allot DDOS AWS Security Groups AWS PKI Services Global Protect, URL Filtering, Wildfire Routing Protocol Support (BGP, ISIS) as it...

  • Senior Cloud Security Engineer

    5 days ago

    Denver, United States Datadog Full time

    As a Cloud Security Engineer you will partner with different stakeholders across the organization to secure our cloud infrastructure. We work closely with engineers across various domains of the Datadog infrastructure stack, driving a culture of empowering engineers to have strong security ownership of their products and services through the development of...

  • Security Operations Engineer

    1 week ago

    Denver, United States PayZen Full time

    PayZen is on a mission to bring financial health to healthcare. Our products improve both access and affordability for patients and cash flow & administrative complexity for medical providers. We are trusted by a rapidly growing number of health systems, hospitals, and physician groups and are backed by leading venture capital investors. About the Role...

  • Consultant - Application Security Penetration Tester | remote US

    3 days ago

    Denver, United States Coalfire Full time

    Consultant - Application Security Penetration Tester | Remote US Coalfire Coalfire is the cybersecurity advisor that combines extensive cloud expertise, technology, and innovative approaches to help clients develop scalable… View company page About CoalfireCoalfireis on a mission to make the world a safer place by solving our clients’ toughest...

  • Sr. Security Network Engineer

    2 weeks ago

    Denver, United States Bridgeview Inc Full time

    Bridgeview is currently seeking a Network Engineer for one of our clients. If you love building and supporting technology solutions that make businesses successful, then read on for more details. TITLE: Network Engineer LOCATION: NE Denver / Aurora, CO – Hybrid 3 days WFH, 2 days onsite COMPENSATION: $60-70 per hour BENEFITS & PERKS: Medical, Dental &...

  • Network Security Engineer

    3 days ago

    Denver, United States Saxon Global Full time

    100% remote Key Duties, Accountabilities and Responsibilities: •Works from established procedures with limited instruction. •Assist in the development and enhancement of procedures. •Performs moderately difficult assignments, requiring a great deal of originality and problem solving. •Working knowledge of project management concepts; able to run...

  • Cloud Security Engineer

    1 week ago

    Denver, United States Ampcus Full time

    Cloud Security EngineerAbout the role Within the Identity and Access Management (IAM) team, the Cloud Security Engineer will be responsible for designing, implementing, and maintaining solutions to secure our identities within our cloud environments. This individual will collaborate with cross-functional teams to ensure the security, efficiency, and...

  • Cloud Security Engineer

    3 days ago

    Denver, United States Motion Recruitment Full time

    We are working with a company that is focused on providing a direct broadcast satellite and American television. Solving companies' business problems and achieving their vision by engaging in software. This company is looking for a Cloud Security Engineer to bring in a team-oriented and creative player. As a Cloud Security Engineer, you will design and...

  • Cloud Security Engineer

    4 days ago

    Denver, United States Motion Recruitment Full time

    We are working with a company that is focused on providing a direct broadcast satellite and American television. Solving companies’ business problems and achieving their vision by engaging in software. This company is looking for a Cloud Security Engineer to bring in a team-oriented and creative player. As a Cloud Security Engineer, you will design and...

  • Sr. Security Network Engineer

    2 weeks ago

    Denver, United States BridgeView Full time

    Bridgeview is currently seeking a Network Engineer for one of our clients. If you love building and supporting technology solutions that make businesses successful, then read on for more details.TITLE: Network EngineerLOCATION: NE Denver / Aurora, CO – Hybrid 3 days WFH, 2 days onsite COMPENSATION: $60-70 per hourBENEFITS & PERKS: Medical, Dental & Vision...

  • Sr. Security Network Engineer

    1 week ago

    Denver, United States Bridgeview Inc Full time

    Bridgeview is currently seeking a Network Engineer for one of our clients. If you love building and supporting technology solutions that make businesses successful, then read on for more details. While professional experience and qualifications are key for this role, make sure to check you have the preferable soft skills before applying if required. TITLE:...

  • Sr. Security Network Engineer

    6 days ago

    Denver, United States Bridgeview Inc Full time

    Bridgeview is currently seeking a Network Engineer for one of our clients. If you love building and supporting technology solutions that make businesses successful, then read on for more details. TITLE: Network Engineer LOCATION: NE Denver / Aurora, CO Hybrid 3 days WFH, 2 days onsite COMPENSATION: $60-70 per hour BENEFITS & PERKS: Medical, Dental & Vision...

  • Sr. Security Network Engineer

    2 weeks ago

    Denver, United States BridgeView Full time

    Bridgeview is currently seeking a Network Engineer for one of our clients. If you love building and supporting technology solutions that make businesses successful, then read on for more details.TITLE: Network EngineerLOCATION: NE Denver / Aurora, CO – Hybrid 3 days WFH, 2 days onsite COMPENSATION: $60-70 per hourBENEFITS & PERKS: Medical, Dental & Vision...

  • Cloud Security Engineer

    5 days ago

    Denver, United States Motion Recruitment Full time

    We are working with a company that is focused on providing a direct broadcast satellite and American television. Solving companies' business problems and achieving their vision by engaging in software. This company is looking for a Cloud Security Engineer to bring in a team-oriented and creative player. As a Cloud Security Engineer, you will design and...

  • General Systems Engineering Application

    1 month ago

    Denver, United States NovaSpace Full time

    We are looking for a Systems Engineer to help build out, maintain, and troubleshoot our rapidly expanding infrastructure. You will be part of a talented team of engineers that demonstrate superb technical competency, delivering mission critical infrastructure and ensuring the highest levels of availability, performance and security. Qualified systems...