Application Security Engineer

at  Teradata

What You’ll Do
The Application Security integrates and support security at every phase of the software development lifecycle (SDLC) and work closely with developers to ensure applications are secure from inception through release. Given Teradata’s large portfolio of analytic applications, we are pushing the boundaries of security by automating source code analysis, and analytic security. Our expertise lies in deep technical understanding of security and our application security engineers within Teradata. The Application Security team is tasked with enabling software developers to build secure application and products through automating security (Shifting Left).
Who You’ll Work With
The Application Security team is an integral part of Teradata Information Security and closely partners and guides Product Engineering. Application Security team works with several teams such as CloudOps, DevOps and our Engineering teams.
What Makes You a Qualified Candidate

KNOWLEDGEABLE IN 1 OR MORE OF ANY OF THE FOLLOWING AREAS:

Understands languages the following Java, C/C++, Go, Python, and JavaScript/Typescript and can apply security measures to secure them.
Ability to communicate effectively with business representatives in explaining security topics clearly and where necessary, in layman’s terms.
General understanding with SAST, SCA, DAST, IaC, and Container analysis tools.
Ability to interpret SAST, SCA, DAST, IaC, and Container analysis results, and describe issues and fixes to non-security experts.
An understanding of web application and API vulnerabilities.
Familiarity with one or more cloud environments such as AWS, Azure, and/or Google Cloud.
Ability to automate tasks and integrations via API’s using Python, Bash, or Go.
An understanding of one or more programming language such as Java, C/C++, JavaScript/Typescript, Go, Python, etc.
An understanding of HTTP and SSL/TLS protocols, and Web applications.
An understanding of CI/CD processes and tools.

EDUCATION BACKGROUND:

Knowledge of core application security principles, common security vulnerability classes, their root causes, and mitigations.
MS/BS degree in Electrical Engineering, Computer Science, Information Technology, or related field. Advanced degree highly preferred

Please refer the Job description for details