Job Description
A Senior Application Security Engineer responsible for assessing, enhancing, and ensuring the security of Celonis's applications and platforms through threat modeling, security reviews, and automation, while leading security projects and mentoring team members.
Key Responsibilities
- Assess and validate the security of applications, services, and websites to ensure high security standards
- Conduct threat modeling, secure code reviews, and security assessments to identify vulnerabilities
- Review security architecture of application stacks, including cloud and emerging technologies
- Analyze source code for security issues and develop security test cases
- Provide risk assessments and remediation guidelines to developers and business owners
- Research security best practices, trends, threats, and vulnerabilities
- Perform security reviews of new features, including vulnerability identification and security posture verification
- Partner with engineering teams to integrate security controls into CI/CD pipelines
- Develop security baselines for applications, containers, cloud, and orchestration platforms
- Implement security architecture, controls, and methods to meet compliance and audit requirements
- Lead complex security projects from planning to execution
- Act as an internal expert on secure software development practices and lead security awareness initiatives
Requirements
- Minimum of 5 years of previous experience in information security.
- At least 3 years of previous experience working within software development.
- A bachelor’s degree in Computer Science, Information Security, Cyber Security, or an equivalent field.
- Proven track record of performing secure design reviews and threat modeling on complex systems.
- Comprehensive knowledge of fundamental application security principles, secure coding practices, and common web application vulnerabilities, including those listed in OWASP Top 10.
- Ability to conduct threat modeling, secure code reviews, and security assessments across web native applications and infrastructure.
- Experience in conducting security architecture reviews of application stacks, including applications built on cloud and emerging technologies.
- Experience reviewing source code for potential security issues and writing security test cases to check for vulnerabilities or missing security controls.
- Ability to provide specific risk assessment and remediation guidelines for developers and business owners.
- Knowledge of security best practices, trends, threats, vulnerabilities, and technology frameworks.
- Experience performing in-depth security reviews of new features, including identifying security vulnerabilities such as OWASP top ten, and verifying security posture through source-assisted security assessments and penetration testing using manual and automated techniques with tools such as Burp Suite and Semgrep.
- Experience partnering with engineering and operations teams to integrate mitigation controls into continuous integration, delivery, and deployment processes.
- Experience developing security baselines for applications, containers, cloud, and orchestration platforms, and integrating them into CI/CD pipelines.
- Ability to implement security architecture, methods, and controls required to meet security, compliance, and audit requirements such as NIST controls and SOC2.
- Experience leading complex security projects from initial planning through execution and completion.
- Excellent written and oral communication skills to articulate and communicate risks to both technical and non-technical audiences.
- Demonstrated ability to work independently and in cross-functional teams, effectively multitasking in a fast-paced environment.
Benefits & Perks
Base salary range of $161,000 to $218,000 USD (location-based)
Bonus, commission, and equity benefits
Health, dental, and life insurance
401k retirement plan
Paid time off (PTO)
Generous paid parental leave
Hybrid working options
Company equity RSUs
Extensive benefits package
Gym subsidies
Counseling and well-being programs
Dedicated volunteer days
Clear career paths and internal mobility
Mentorship opportunities
Access to resources for well-being
Ready to Apply?
Join Celonis and make an impact in renewable energy
Stay Updated on Sustainability Jobs
Get the latest renewable energy jobs and career tips delivered to your inbox.
Job Alerts
Get notified about new sustainability jobs
More at Celonis
More jobs at Celonis
Senior Value Engineer
Celonis
NEW
Paris
Full Time
18h
Senior Value Consultant - Data Analytics Supply Chain Transformation
Celonis
NEW
Paris
Full Time
18h
Senior Process Intelligence and Automation Consultant
Celonis
NEW
Paris
Full Time
18h
More jobs in New York, New York
Manager of EPA Reporting Compliance
Coalition for Green Capital
NEW
New York
Full Time
18h
$118k-133k
Lead Commissioning Engineer
Nexamp
NEW
New York
Full Time
18h
$140k-155k
Billing Analyst (Utilities)
Metergy Solutions
NEW
New York
Full Time
18h