Application Security Engineer

Veeam®, the #1 global market leader in data protection and ransomware recovery, is on a mission to empower every organization to not just bounce back from a data outage or loss but bounce forward.

With Veeam, organizations achieve radical resilience through data security, data recovery, and data freedom for their hybrid cloud. 

The Veeam Data Platform delivers a single solution for cloud, virtual, physical, SaaS, and Kubernetes environments that gives IT and security leaders peace of mind that their apps 
and data are protected and always available.

Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 450,000 customers worldwide, including 74% of the Global 2000, who trust Veeam to keep their businesses running.

 

We are looking for an Application Security Engineer to join our growing team of experts for our SaaS platform. The SaaS solutions we develop and offer to our customers are built on Microsoft Azure offering best-in-class Data Protection services.    

Your tasks will include:  

• Integrate security throughout all steps of the SDLC 

• Automation of the deployments, and maintenance of a SaaS Application Security program and platform 

• Working with engineering teams to build upon Secure SDLC deployments 

• Continuous evaluation and improvement of the reliability, security and compliance of our systems and code 

• Proactively meet standards for information security and compliance, such as FedRAMP,  ISO (International Standards Organization), SOX (Sarbanes Oxley), SSAE (Standards for Attestation Engagements) 16, etc.  

• Shepherd the definition, documentation, and improvement of our internal standards security and resiliency 

Technologies we work with:    

• Atlassian Suite, Azure DevOps, Git 

• Azure (Entra ID, API Management, Cosmos Db, Storage services, Azure Functions, static website hosting, Azure security, etc.)  

• IaC tools (Azure ARM templates, AWS CloudFormation, Terraform, the Serverless Framework, etc.)  

• Observability (Azure Monitor, AppInsights, Elastic Cloud [ELK])  

What we expect from you:   

• 3+ years of experience implementing secure design principles within a modern SDLC framework, directly supporting the security and compliance of Engineering and SRE teams 

• A partner mindset. You do not see security engineering as a gatekeeper but someone who comes along side and enables teams through hand on engineering 

• Demonstrating a team-oriented attitude, with a willingness to actively support and collaborate with all teams to achieve our goals 

• Deep understanding of Software Development practices and standards 

• Experience with Security and Compliance Native and Off-the-Shelf toolsets (Sentinel, SAST, DAST, CNAPP and Cloud Security PaaS tools.) 

• Experience managing Azure IaaS (Infrastructure as a Service) and PaaS (Platform as a Service) solutions  

• Strong problem-solving skills and the ability to troubleshoot complex issues in a distributed, multi-tenant environments 

• Experience with implementation, maintenance, and support of CI/CD practices and tools (Azure DevOps, GitHub Actions or similar)  

• English proficiency level sufficient to communicate with international teams   

Will be an advantage:   

• Experience with taking cloud-based SaaS Products through various Compliance frameworks (FedRAMP, HiTRUST, Soc2) 

• Experience with threat modeling  

• Experience with AWS (ECS, RDS, DynamoDb, VPCs, Step Functions, Lambda, IAM, EC2, S3, etc.)  

• Understandi