Software Engineer II - Application Security

Vertafore is looking for talented people to join our team in Michigan. Our dynamic environment provides professional development, fast upward mobility, and exposure to the latest and greatest in technology. Vertafore is a leading technology company whose innovative software solution are advancing the insurance industry. Our suite of products provides solutions to our customers that help them better manage their business, boost their productivity and efficiencies, and lower costs while strengthening relationships. Our mission is to move InsurTech forward by putting people at the heart of the industry. We are leading the way with product innovation, technology partnerships, and focusing on customer success. Our fast-paced and collaborative environment inspires us to create, think, and challenge each other in ways that make our solutions and our teams better.

We are headquartered in Denver, Colorado, with offices across the U.S., including East Lansing, Michigan – we are minutes from Michigan State University, Lansing Community College, and Cooley Law School!

JOB DESCRIPTION

As a Software Engineer II – Application Security, you will be a member of an energetic agile team dedicated to application security. You and your team will collaborate with teams throughout the organization to ensure our product solutions are secure. You will be a security champion and share your knowledge of security best practices with your colleagues to foster a culture of secure coding. You will assist application teams in the remediation or mitigation of security vulnerabilities, both in our applications as well as in third-party dependencies.

If you love technology, have a passion for application security, are hungry to learn, and are driven to contribute to a world-class team of engineers, you’re who we are looking for.

Core Requirements and Responsibilities :

• Ensures our applications meet internal security standards and SSDLC (Secure Software Development Lifecycle) best practices.
• Develops new features and maintains existing features of our internal security tooling.
• Participates in threat modeling exercises with application development teams.
• Monitors results of dynamic, static, and dependency vulnerability scans.
• Research security findings to assist in determination of validity.
• Supports application development teams in the remediation of vulnerabilities.
• Provides technical training on secure coding and ongoing guidance to application developers.
• Conducts technical research on vulnerable third-party libraries and provides recommendations for resolution.
• Monitors evolving security threats, escalating when necessary.
• Stay current on application security trends and practices.
• Promotes a culture of secure coding best practices.
• Creates artifacts / documents that are valuable to the team.
• Writes well-designed, testable code.
• Participates in code reviews, both of your own code and as a reviewer.
• Mentors and inspires others to raise the bar for everyone around them.

Knowledge, Skills and Abilities :

Qualifications :

Additional Requirements and Details :

Why Vertafore is the place for you :

Why Vertafore is the place for you :

The selected candidate must be legally authorized to work in the United States.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all the job responsibilities, duties, skill, or working conditions. In addition, this document does not create an employment contract, implied or otherwise, other than an "at will" relationship.

Vertafore strongly supports equal employment opportunity for all applicants regardless of race, color, religion, sex, gender identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, sexual orientation, genetic information, or any other characteristic protected by state or federal law.

The Professional Services (PS) and Customer Success (CX)  bonus plans are a quarterly monetary bonus plan based upon individual and practice performance against specific business metrics. Eligibility is determined by several factors including : start date, good standing in the company, and actives status at time of payout.

The Vertafore Incentive Plan (VIP)  is an annual monetary bonus for eligible employees based on both individual and company performance. Eligibility is determined by several factors including :  start date, good standing in the company, and actives status at time of payout.

Commission plans  are tailored to each sales role but common components include quota, MBO's and ABPMs. Salespeople receive their formal compensation plan within 30 days of hire.

Vertafore is a drug free workplace and conducts preemployment drug and background screenings.