Senior Application Security Engineer

<p>We are expanding our Global footprint into Prague and we are looking for an experienced  Application Security Engineer to help us ensure the security of the company’s products and services. </p><p></p><h1>About the team</h1><p>Rapid7’s Security Engineering team = your digital superheroes! These folks are all about keeping our digital world safe and sound. From outsmarting cyber threats to crafting cool security solutions, they've got it covered. With their skills, they're the guardians of our cyber realm, making sure everything stays locked down and in tip-top shape. </p><p></p><h1>About the role</h1><p>As a Senior Application Security Engineer you will focus heavily on maintaining and improving Rapid7’s current AppSec tooling, driving vulnerability management, and collaborating with developers and engineers in the remediation of those application vulnerabilities. <br/>In addition to this, a secondary responsibility is to work closely with the rest of the Security Engineering team on building and maintaining automation pipelines, dashboarding around various metrics within the organization, and designing new workflows and tools which aim to improve the efficiency of the organization. </p><p></p><p>Key responsibilities include:</p><ul><li><p>Managing and improving our current SAST / DAST solution</p></li><li><p>Driving compliance with secure coding practices</p></li><li><p>Continuous vulnerability scanning of products and services </p></li><li><p>Coordination with development and engineering teams on remediating vulnerabilities</p></li><li><p>Building data pipelines and dashboards around security metrics from a variety of sources</p></li></ul><p></p><p>The skills you’ll bring include:</p><ul><li><p>Ideally 5-8 years of experience as a Security Engineer focusing on application security</p></li><li><p>Strong understanding of SDLC and CI/CD pipeline</p></li><li><p>Strong understanding of the vulnerability management life cycle</p></li><li><p>Experience configuring and using SAST tooling (Snyk a plus)</p></li><li><p>Experience configuring and using DAST tooling (Insight AppSec a plus)</p></li><li><p>Proficiency in Python and interacting with RESTful APIs</p></li><li><p>Capable of working independently with minimal supervision </p></li></ul><p></p><p>We know that the best ideas and solutions come from multi-dimensional teams with a variety of backgrounds and professional experiences. If you are excited about this role and feel your skills and experience will make an impact, please don’t hesitate to apply - we’d love to hear from you! </p><p></p><p></p><h1>About Rapid7</h1><p><br/>Rapid7 (NASDAQ: RPD) helps organizations across the globe protect what matters most so innovation can thrive in an increasingly connected world. Our comprehensive technology, services, and community-focused research simplify the complex for security teams, helping them reduce vulnerabilities, monitor for malicious behavior, be in 10 places at once, and shut down attacks. We’re on a mission to make security solutions easier to use and access so we can bring safety and resilience to more people.  With more than 10,000 customers across 140+ countries, Rapid7 is a leader in cybersecurity that has earned numerous industry accolades and recognition for our technology and culture.</p>