Senior Product Security Offensive Engineer

iManage

85d • $122,000 - $185,000

About The Position

This is a remote role within a global team that utilizes cutting-edge technology to stay connected with colleagues worldwide. Occasional travel to a local office may be required for in-person collaboration with your team, as well as for company events, team building activities, or strategic meetings. Being a Senior Product Security Offensive Engineer at iManage Means… You will join this team of security engineers that will guide the global engineering teams on security considerations as well as assess and improve product security at iManage. We operate on a Zero-Trust approach, so you will play an integral role in the continued maintenance and maturity of our Zero-Trust architecture. Our focus is to ensure that our engineers ship and maintain secure code and infrastructure, and we want your help to do it. You are passionate about technology and willing to work with many industry security perspectives including threat modeling, architecture review, dynamic code review, static code reviews, cloud assessments, data security assessments, runtime/event security and penetration testing. You have a focus on offensive security activities to discover weakness in all tiers of iManage products and technology.

Requirements

• A bachelor’s degree or higher in computer science or related field.
• 5+ years of relevant work experience.
• Proven experience with assessing risk and providing remediation guidance for weaknesses detected using manual penetration testing plus one or more of the following perspectives: SAST, SCA, DAST, host/container security, IaC, platform security, cloud configuration, network security, data security, API security, AI security/LLMs and CI/CD process.
• Knowledge of best practices, metrics and mechanisms to improve security testing methodologies.
• Proven experience and understanding of multi-tier web application architecture patterns.
• Experience with software development practices, tooling and technologies.
• Curiosity and a desire to improve customer experience, reduce risk, improve methods and prepare for new threats.
• Ability and desire to communicate with colleagues to strategize and implement continual improvement through industry best practices, threat modeling and vulnerability triage.
• In-depth understanding of 'OWASP Top 10' risks like injection, XSS, CSRF, etc.
• Understanding of data classification and data security control implementations.
• Experience with common cloud security controls and best practices.

Responsibilities

• Conducting high quality product penetration tests independently, or as part of a team.
• Fostering collaboration with engineers and leadership to understand actual risk, remediation priority and remediation expectations.
• Evangelizing security best practices with effective verbal and written communication skills.
• Striving to consistently learn and improve as well as sharing knowledge with colleagues.

Benefits

• Creating an inclusive environment where I can help shape the culture not just by fitting in, but by adding to it.
• Providing a market competitive salary that is applied through a consistent process, equitable for all our employees, and regularly reviewed based on industry data.
• Rewarding me with an annual performance-based bonus.
• Offering comprehensive Health/Vision/Dental/Life Insurance, and a 401k Retirement Savings Plan with a company match up to 4%.
• Granting enhanced leave for expecting parents; 20 weeks 100% paid for primary leave, and 10 weeks 100% paid for secondary leave.
• Providing me with a flexible time off policy to take the time off that I need.
• Having multiple company wellness days each year to prioritize mental health and well-being.
• Providing access to RethinkCare, a global behavioral health platform that enhances personal well-being, strengthens professional resilience, and empowers parental success through expert-led training and resources.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Bachelor's degree
• Number of Employees: 1,001-5,000 employees