Security Engineer (Application Security)

Acceldata • Campbell, CA

4d

About The Position

Acceldata is hiring a Security Engineer focused on SOC operations, penetration testing, and application security. The role owns the security of the Acceldata platform end to end by identifying, classifying, and addressing vulnerabilities, and working closely with Product, Sales, and Engineering to build and ship secure software. The position combines proactive security testing with reactive security response, including a working knowledge of SOC operations, real-time threat monitoring, and response.

Requirements

• Hands-on production experience in penetration testing, white-box testing, application security, and vulnerability management.
• Strong command of the OWASP Top 10 and experience finding these issues in real applications.
• Experience fixing security issues in Java code.
• Experience with API security testing.
• Hands-on experience with AppScan, Fortify, and Checkmarx SAST/DAST tooling.
• Experience delivering secure code training to developers and running bug bounty programs.
• Strong communication skills and a collaborative approach with the engineering team.
• Working knowledge of SOC operations, real-time threat monitoring and response, and how these complement proactive security efforts.

Responsibilities

• Run periodic penetration tests and white-box assessments to verify that security requirements are met, testing before product ramp-up where possible.
• Own end-to-end CVE management, including triage and impact analysis across confidentiality, integrity, and availability.
• Ensure open-source dependency vulnerabilities are remediated and monthly and quarterly patch releases include the latest security fixes.
• Partner with cross-functional teams to incorporate security and risk questionnaire evaluations into the sales and vendor review lifecycle.
• Coordinate regular third-party application security assessments of Acceldata products, ensuring findings are filed, fixed, and actioned.
• Perform threat modelling and design reviews for products and features.
• Build security automation for continuous validation, SAST, and DAST.
• Act as the first responder for customer-facing security questions about CVEs, bug triage, and incident management.
• Partner with Product, Engineering, and other internal and external teams to deliver secure software.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed