Staff Application Security Engineer (Security)
PhantomSalary not specified
Full Time
Senior (5 to 8 years), Expert & Leadership (9+ years)
Not SpecifiedCompensation
Senior (5 to 8 years)Experience Level
Full TimeJob Type
UnknownVisa
N/AIndustries
Requirements
- 7+ years of experience in IT, information security, security engineering, security event monitoring, incident response, eDiscovery forensic, infrastructure administration, compliance, security administration, audit and/or risk
- Professional certification(s) in Information Security, such as CompTIA Security+, GIAC Security Essentials, Certified Security Analyst (ECSA), Certified Ethical Hacker (CEH), Certified Red Team Operator (CRTO), Offensive Security Certified Professional (OSCP), or Certified Information Systems Security Professional (CISSP)
- Advanced understanding of all aspects of information security and information technology, including policies, standards, technical procedures/processes, and regulatory requirements
Responsibilities
- Support, deliver, and lead aspects of the offensive security strategy, including guidance on design, implementation, development, and execution of solutions to maintain and improve the security posture
- Design solutions to mitigate and/or reduce business exposure to information security threats
- Execute Penetration Testing: Security testing of applications and infrastructure from an adversary view
- Manage Responsible Disclosure: Communication path with security researchers (Ethical Hackers) to report cybersecurity issues
- Manage Bug Bounty: Work with upper tier security researchers to find cybersecurity issues and provide compensation for notable findings via paid bounties
- Perform Attack Surface Analysis: Discover critical misconfigurations, obsolete infrastructure, improve security posture, and improve cybersecurity business rating
- Conduct Adversary Simulations: Use adversary tradecraft to uncover attack paths that could compromise critical controls and test resilience against cyber-attacks
- Perform Critical Controls Testing: Test critical controls as requested by Senior Management Team
Skills
Key technologies and capabilities for this role
Questions & Answers
Common questions about this position
What salary can I expect for the Sr. Security Engineer role?
This information is not specified in the job description.
Is this a remote position or does it require office work?
This information is not specified in the job description.
What experience and certifications are required for this role?
Candidates need 7+ years of experience in IT, information security, security engineering, incident response, or related fields, plus professional certifications such as CompTIA Security+, GIAC Security Essentials, CEH, OSCP, or CISSP.
What does the day-to-day work involve at Assurant as a Sr. Security Engineer?
The role involves leading offensive security strategies including penetration testing, responsible disclosure, bug bounty programs, attack surface analysis, adversary simulations, and critical controls testing to improve the security posture.
What makes a strong candidate for this Sr. Security Engineer position?
A strong candidate has 7+ years in IT/security fields like penetration testing or incident response, holds relevant certifications like OSCP or CISSP, and has advanced knowledge of information security policies, standards, and offensive security practices.
Assurant
Provides risk management and insurance solutions
About Assurant
Assurant provides risk management solutions that focus on protecting major consumer purchases, particularly in mobile devices, electronics, and smart technology. The company offers insurance products and extended service contracts that help consumers safeguard their investments in high-value items. When a product is damaged or malfunctions, Assurant also provides repair services to restore it efficiently. This approach helps clients minimize financial losses from unexpected events. Assurant generates revenue through the sale of insurance policies, service contracts, and repair services. Unlike many competitors, Assurant emphasizes diversity, equity, and inclusion within its corporate culture, which enhances its ability to serve a diverse customer base. The company's goal is to support consumers and businesses in maintaining their day-to-day operations while protecting their investments.
New York City, New YorkHeadquarters
1892Year Founded
IPOCompany Stage
Financial Services, Consumer GoodsIndustries
10,001+Employees
Benefits
Health Insurance
Hybrid Work Options
Professional Development Budget
Risks
Integration challenges from acquiring iSmash may affect operational efficiency.
Regulatory scrutiny from acquiring American Lease Insurance could pose compliance challenges.
Cultural clashes from acquiring American Financial & Automotive Services may impact operations.
Differentiation
Assurant specializes in risk management for mobile devices and electronics globally.
The company offers insurance, service contracts, and repair services for high-value items.
Assurant's DEI commitment fosters innovation and enhances customer understanding.
Upsides
Increased demand for mobile device insurance due to remote work trends.
5G expansion drives demand for new devices and related insurance products.
Acquisition of iSmash enhances Assurant's tech repair service capabilities.
Related Jobs
RemoteRemoteSenior Penetration Tester
HumanaSalary not specified
RemoteSenior Security Operations Analyst
Vanta$139,000 - $164,000/year
- Full Time
- Senior (5 to 8 years)
RemoteCyber Security (SOC) Analyst
UltraViolet CyberSalary not specified
- Full Time
- Junior (1 to 2 years)
RemoteSenior Engineer, IT & Information Security Automation
SmithRxSalary not specified
RemoteSecurity Architect
EarnestSalary not specified
- Full Time
- Expert & Leadership (9+ years)
RemoteBoston Dynamics Consulting - Senior Consultant
Boston DynamicsSalary not specified
- Full Time
- Senior (5 to 8 years)
Remoteセキュリティエンジニア（レッドチーム）
PayPalSalary not specified
- Full Time
- Mid-level (3 to 4 years)
RemoteSenior Security Engineer, Application Security
Trail of BitsSalary not specified
- Full Time
- Senior (5 to 8 years)
RemoteSenior Security Analyst, Vulnerability Management
VantaSalary not specified
RemoteSenior Security Engineer
BraceSalary not specified
- Full Time
- Senior (5 to 8 years)
RemoteSenior Incident Response Engineer
Snowflake$198,000 - $303,600/year
- Full Time
- Junior (1 to 2 years)
RemoteDFIR Recovery Specialist
At-BaySalary not specified
- Full Time
- Junior (1 to 2 years)
RemoteSr. Information Security Analyst
ValonSalary not specified
- Full Time
- Senior (5 to 8 years)
RemoteSenior GRC Analyst
TinesSalary not specified
- Full Time
- Senior (5 to 8 years)