Application Security Engineer

Position Summary

Role and Responsibilities

Application Security Engineer

Samsung Ads focuses on enabling brands to connect with Samsung audiences across all devices. As an international company, Architects at Samsung work on big complex projects with stakeholders and teams located around the globe.

Our purpose is to deliver unparalleled results for our customers. Samsung Ads uniquely transforms the advertising landscape by using comprehensive data to build the world’s most intelligent connected audience platform. We deliver on Samsung Electronics’ 51-year commitment to excellence through smart, easy, effective advertising solutions to make advanced video advertising work.

What you will do

As an Application Security Engineer you will partner work along with the security leadership team. In addition, you shape organization-wide application security best practices, resolving complex security issues, and participating in technical conversations with software developers to answer complex security queries and collect new security requirements. You act as a coach to engineering teams and security champions in an effort to improve the overall security of Samsung Ads products. 

You will also be responsible for working with the Security Engineering manager to foster a proactive relationship with the HQ security team, based in Korea. This partnership is to drive requirements alignment and balance of technical innovation for Samsung Ads with an industry best security posture.   

There will also be an opportunity to directly contribute to the overall Application and Data Protection program and lead cloud security technology around cloud application and data monitoring, reporting and auditing controls. This role plays a key role in securing proactively Samsung ads products. You are involved during all stages of the software development lifecycle and work closely with product and software development teams to model threats, scan for vulnerabilities, identify required control points in the application stack , and pen test early software, systems, and network architectures. 

You will work with some incredibly talented and passionate developers with a solid technical background to bring products and services to a market with unique technical challenges.

Key Responsibilities

• Perform app security reviews, outlining requirements, verifying remediation, threat modeling, data migration, etc

• Assist our engineering teams in building security-first software and infrastructure. 

• Perform threat analysis and security audits on our software and infrastructure

• Define hardening configurations standards

• Configure web application firewall policies to protect public web systems

• Contribute to define and enforce security standards for Cloud Native applications, firewalls, AWS configuration and more 

• Participate in security reviews of service architectures and act as Subject Matter Expert for engineering teams

• Develop a platform to enable engineering teams and corporate teams to understand their vulnerabilities and risks and support their remediation efforts

• Develop policy and documentation for security best practices for technologies new to the company and produce metrics and reports on the cloud security posture of our systems

• Research new technologies and methodologies related to application security and identify how Samsung Ads can adopt them

Required Skills And Experience

• Minimum 4 years' experience and a Bachelor’s degree in Computer Science or related fields such as Statistics, Data Science, Technology, Engineering and Mathematics.

• Strong analytical and communication skills

• Ability to work on their own with self-motivation and be able to motivate their team members 

• Ability to divide a bigger task into smaller segments, delegate tasks, and follow up effectively; ability to ensure tasks are completed as specified without micromanaging

• Eagerness to learn new technologies, and a passion for application security

• Expert on OWASP Web Top 10, and threat modeling using well-known frameworks such as STRIDE

• Strong devel