Software Engineer II - Application Security

Vertafore is looking for talented people to join our team in Michigan. Our dynamic environment provides professional development, fast upward mobility, and exposure to the latest and greatest in technology. Vertafore is a leading technology company whose innovative software solution are advancing the insurance industry. Our suite of products provides solutions to our customers that help them better manage their business, boost their productivity and efficiencies, and lower costs while strengthening relationships.  Our mission is to move InsurTech forward by putting people at the heart of the industry. We are leading the way with product innovation, technology partnerships, and focusing on customer success.  Our fast-paced and collaborative environment inspires us to create, think, and challenge each other in ways that make our solutions and our teams better.

We are headquartered in Denver, Colorado, with offices across the U.S., including East Lansing, Michigan – we are minutes from Michigan State University, Lansing Community College, and Cooley Law School!

JOB DESCRIPTION

As a Software Engineer II – Application Security, you will be a member of an energetic agile team dedicated to application security. You and your team will collaborate with teams throughout the organization to ensure our product solutions are secure. You will be a security champion and share your knowledge of security best practices with your colleagues to foster a culture of secure coding. You will assist application teams in the remediation or mitigation of security vulnerabilities, both in our applications as well as in third-party dependencies.

If you love technology, have a passion for application security, are hungry to learn, and are driven to contribute to a world-class team of engineers, you’re who we are looking for.

Core Requirements and Responsibilities :

• Ensures our applications meet internal security standards and SSDLC (Secure Software Development Lifecycle) best practices.
• Develops new features and maintains existing features of our internal security tooling.
• Participates in threat modeling exercises with application development teams.
• Monitors results of dynamic, static, and dependency vulnerability scans.
• Research security findings to assist in determination of validity.
• Supports application development teams in the remediation of vulnerabilities.
• Provides technical training on secure coding and ongoing guidance to application developers.
• Conducts technical research on vulnerable third-party libraries and provides recommendations for resolution.
• Monitors evolving security threats, escalating when necessary.
• Stay current on application security trends and practices.
• Promotes a culture of secure coding best practices.
• Creates artifacts / documents that are valuable to the team.
• Writes well-designed, testable code.
• Participates in code reviews, both of your own code and as a reviewer.
• Mentors and inspires others to raise the bar for everyone around them.

Knowledge, Skills and Abilities :

Qualifications :

Additional Requirements and Details :

Vertafore is a Flexible First working environment which allows team members to work from home as often as you’d like, while using our offices as a place for collaboration, community, and teambuilding. There are times you may be asked to come into an office and / or travel for specific meetings for a specific business purpose and this varies by job responsibilities.