Cloud Application Security Engineer (Middle/Senior)

<h3>Company Description</h3><p>The <strong>Veeam Quality Assurance team</strong> invites you to work on Veeam’s products together with Veeam QA professionals in Prague.</p><p>Veeam creates software products to solve complicated tasks in the areas of data protection and management. We work with VMware vSphere, Microsoft Hyper-V and Nutanix AHV virtualization platforms; Windows, Linux and Unix operating systems; Active Directory, Exchange, SharePoint, SQL, Oracle and SAP HANA servers and databases; Amazon, Azure and Google public clouds; and many other technologies forming the core of the modern IT-world.</p><h3>Job Description</h3><p><strong>Your tasks will include:</strong></p><ul><li>    Conduct regular security assessments, vulnerability scanning, and penetration testing of Veeam products and services;</li><li>    Work with development teams to integrate secure development practices into the software development lifecycle;</li><li>    Collaborate on the design and implementation of security within public cloud environments;</li><li>    Threat modeling and design reviews for new and existing Veeam products;</li><li>    Conducting manual source code security audits;</li><li>    Using automated application-analysis tools.</li></ul><p> </p><h3>Qualifications</h3><p><strong>To be successful, you will need:</strong></p><ul><li>    3-5 years of experience in application security;</li><li>    Familiarity with cloud platforms, preferably AWS, or Azure;</li><li>    Experience with multiple programming languages (such as     C/C++/C#/JavaScript);</li><li>    Experience with Infrastructure as Code, such as Terraform or Ansible;</li><li>    A good understanding of the principles of secure software development;</li><li>    A desire to develop in the field of application security;</li><li>    A lively and flexible mind, clear logic, and analytical skills;</li><li>    The desire and ability to work as part of a team;</li><li>    Good verbal and written communication skills in English.</li></ul><p><strong>Additional skills:</strong></p><ul><li>    Knowledge of scripting languages (Python, PowerShell, Bash, Ruby, etc.);</li><li>    Knowledge of modern cryptographic algorithms;</li><li>    Experience with DAST and SAST tools;</li><li>    Skills using OWASP ZAP, Burp Suite, Kali Linux tools;</li><li>    Certifications such as OSCP, CEH, CSSLP, CCSP, AWS Certified Security, etc.</li></ul><h3>Additional Information</h3><p><strong><u>We offer:</u></strong></p><ul><li>Excellent professional and career opportunities in the international team of talented and energetic people.</li><li>Generous benefits package from the very first day of your employment including: premium healthcare program for you and your children, sick days, additional payments for sick leave, meal tickets, MultiSport card, public transport pass, cell phone contract.</li><li>Cafeteria Benefit Plan – an additional annual budget that you can spend on a variety of benefits such as travel, sport, wellness, education and many more.</li><li>Flexible working hours, no bureaucracy or formalism.</li><li>Professional trainings and education, including courses and conferences, internal meetups and unlimited access to online library.</li></ul><p><u><strong>Please note</strong></u><strong>: </strong>If the applicant is permanently present outside of the Czech Republic, Veeam reserves the right to refuse to consider the application for a job. Remote job is only possible in case the employee is located in the Czech Republic.</p>