Application Security Engineer II at Ellucian Company LP

, , Mexico -

Full Time

Start Date

Immediate

Expiry Date

03 Sep, 26

Salary

0.0

Posted On

05 Jun, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Application Security, Penetration Testing, SAST, DAST, SCA, DevSecOps, OWASP, AI Security Testing, Secure Development Practices, AWS, Jenkins, WAF, IAST, RASP, Container Security, Virtualization

Industry

Higher Education

Description

About Ellucian Ellucian powers innovation for higher education, partnering with approximately 3,000 customers across 50 countries, serving more than 21 million students. Ellucian's AI-powered platform, trained on the richest dataset available in higher education, drives efficiency, personalized experiences, and strengthened engagement for all students, faculty and staff. Fueled by decades of experience with a singular focus on the unique needs of learning institutions, the Ellucian platform features best-in-class SaaS capabilities and delivers insights needed now and into the future. These solutions and services span the entire student lifecycle, including data-rich tools for student recruitment, enrollment, and retention to workforce analytics, fundraising, and alumni engagement. Ellucian's innovative solutions, vast ecosystem of partners and user community of more than 45,000 provides best practices leading to greater institutional success and achieving better student outcomes. About the Opportunity Ellucian designs technology that powers the educational mission of colleges and universities around the world. Inspired by that goal, Ellucian employees thrive as part of a high-performing global team committed to delivering a modern, connected, industry-leading experience for today’s students and higher education institutions. More than 2,500 institutions in 50 countries around the world look to Ellucian for the ideas and insights that will move education forward, helping people everywhere discover their futures through learning. The individual in this position will be a contributor to DevSecOps and overall application security initiatives in Ellucian Where You Will Make an Impact Analyze the security of Ellucian applications and coding practices using a variety of tools and frameworks. Perform manual and automated application penetration testing. Provide guidance to development teams for remediating application security vulnerabilities. Develop innovative new DevSecOps solutions to application security problems. Act as an evangelist for DevSecOps and application security within Ellucian. Create and deliver application security training for product owners, business analysts, test engineers and developers. Lead ongoing process and policy improvement efforts. Provide mentoring to members of development teams. Conduct ongoing research of trends in application security practices, tools and utilities What You Will Bring A strong passion for application security. 2 to 5 years of experience working as Application Security engineer or similar position. Thorough knowledge of SAST, DAST, SCA tooling. Extensive skills and experience performing application security / penetration testing using manual and automated tools including AI. Progressive application security and software development experience. Demonstrated technical skills, especially in the areas of enterprise application security, AI security testing, and secure development practices. A thorough understanding of OWASP application security tools, code libraries and documentation. Experience developing automated solutions to application security problems. Demonstrated ability to clearly communicate complex ideas verbally and in writing. Excellent troubleshooting, problem-solving, and analytical skills. Ability to occasionally work off-hours or extended hours in support of various projects. Desired Skills/Knowledge/Experience: Preferable experience of 2-5 years in performing manual and tool driven penetration testing for web apps, APIs. Knowledge or experience of DevOps tooling such as Jenkins is a plus. Understanding of WAF, IAST & RASP. Understanding of containers, virtualization and orchestration tools. Experience securing Cloud applications in AWS. Application security certification such as CSSLP, GIAC GWAPT or similar. Experience remediating application vulnerabilities. AWS knowledge and/or certifications is an advantage. What makes #Ellucianlife Comprehensive health coverage: family major medical expenses, dental and life insurance. Christmas bonus 30 days Saving fund Monthly food coupon 15 workdays vacation Thrive Flex Program that allows you to contribute towards your health, financial or learning interests 5 charitable days to support the community that supports us Diversity and inclusion programs that promote employee resource groups such as: Women in Technology, Pride and Go Green to name a few. Parental leave Employee referral bonuses to encourage the addition of great new people to the team We Foster a learning culture with: Tuition Reimbursement Assistance Professional development opportunities LinkedIn Learning #LI-RB1 #LI-Remote

Responsibilities

The role involves analyzing application security and coding practices through manual and automated penetration testing. The engineer will develop DevSecOps solutions, provide remediation guidance to developers, and deliver security training across the organization.