Security Engineer (Application Security)

Acceldata • Campbell, CA

2d

About The Position

Acceldata is hiring a Security Engineer focused on SOC operations and penetration testing. The role owns the security of the Acceldata platform end-to-end by finding, classifying, and fixing vulnerabilities. The engineer works closely with Product, Sales, and Engineering to build and ship secure software, balancing proactive testing with reactive security response. The position requires working knowledge of SOC operations, real-time threat monitoring and response, and how these complement proactive security efforts.

Requirements

• Hands-on production experience in penetration testing, white-box testing, application security, and vulnerability management.
• Strong command of the OWASP Top 10 and experience finding these issues in real applications.
• Experience fixing security issues in Java code.
• Experience with API security testing.
• Hands-on experience with AppScan, Fortify, and Checkmarx SAST/DAST tooling.
• Strong communication skills and a collaborative approach with the engineering team.

Nice To Haves

• Experience delivering secure code training to developers.
• Experience with bug bounty programs.

Responsibilities

• Run periodic penetration tests and white-box assessments to verify that security requirements have been met, testing before a product ramps where possible.
• Own end-to-end CVE management, including triage and impact analysis across confidentiality, integrity, and availability.
• Ensure open-source dependency vulnerabilities are remediated and monthly and quarterly patch releases include the latest security fixes.
• Partner with cross-functional teams to integrate thorough security and risk questionnaire evaluations into the sales and vendor review lifecycle.
• Coordinate regular third-party application security assessments on Acceldata products and ensure bugs are filed, fixed, and actioned.
• Perform threat modelling and design reviews for products and features.
• Build security automation for continuous validation, SAST, and DAST.
• Act as the first responder for customer-facing security questions on CVEs, bug triage, and incident management.
• Partner with Product, Engineering, and other internal and external teams to deliver secure software.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed