We’re hiring on the Blackbaud Application Security team!
As a member of the Cyber Security organization at Blackbaud, the Application Security Engineer is a specialized position that plays a key role in securing software built and / or used by Blackbaud.
You can expect to work closely with software development teams as well as third-party organizations to ensure that security, privacy, and compliance requirements are planned for, designed, and built into software applications at Blackbaud.
In addition to securing software, you will be expected to stay up-to-date on what’s happening in the Cyber Security industry in order to optimize and align our application security processes and systems throughout the Software Development Life Cycle (SDLC) at Blackbaud.
The Application Security Engineering team focuses on building automation for security self-service and vulnerability management to reduce unnecessary toil.
What you will be doing :
Identifying solutions for difficult security problems while participating in a broader agile Application Security team.
Building comprehensive solutions to conduct consolidation, aggregation, and notification of security findings to respective stakeholders.
Conducting threat modeling, secure design reviews, and providing direct guidance to development teams.
Promoting, designing, and evaluating application security in all phases of the SDLC and constantly looking for innovative ways to improve processes.
Influencing, building, and assisting with information security challenges within applications.
What we'll want you to have :
You are either a security-minded software engineer who has been building modern services using a microservice architecture in an agile development environment or a development-interested security practitioner who understands security best practices, but wants to get closer to development and engineering.
3+ plus years experience with open source and commercial application security testing and analysis tools for DAST, SAST, SCA, and Attack Surface Management, e.
g. Burp Suite, OWASP Zap, Rapid 7 InsightAppSec, AppScan, Fortify, Checkmarx, Coverity, Semgrep, OWASP Dependency Check, Mend, Blackduck, OWASP Amass, Spiderfoot, and various programming language linters.
3+ years experience with Python, Bash, and / or PowerShell.
3+ years experience in integrating security solutions into CI-CD pipelines and automating tooling orchestration.
Experience partnering with development and systems engineers on impactful security initiatives.
Understanding of software development; how it is designed, built, and can be broken is critical.
Understand DevSecOps cultural mindsets, and an engineering focused approach to solving complex security problems.
Strong verbal and written communication skills to translate security objectives and requirements to specific engineering outcomes.
The Application Security team at Blackbaud is committed to ensuring security issues are prevented, discovered, and remediated in collaboration with our engineering partners across the business.
If that description fits your approach to security, we’d love to chat with you about what you can do to help our mission!
LI-REMOTE
Blackbaud is a remote-first company which embraces a flexible remote work culture. Blackbaud supports hiring and career development for all roles from the location you are in today!
Senior Application Engineer
Application Engineer will be part of the Corporate Solutions Design & Engineering team. Minimum of 5 years of experience in a software engineer and/or data infrastructure role, with a proven track record of building and maintaining data streaming applications. About the Role:The Corporate Solutions ...
Senior Identity Access Management Security Engineer
The Identity & Access Management Senior Security Engineer is responsible for acting as resource, leader, and peer coach with other engineers in the development, testing, implementation, and integration of Identity and Access Management systems and solutions. Experience working within an information ...
Senior Security Engineer - Cloud Security
About the Role:We are looking for an experienced security engineer to join our cloud security team, and lead efforts in upleveling Confluent’s cloud security maturity. Document security best practices and collaborate with Engineering teams in implementing effective security solutions. Participate in...
Senior Applications Engineer - Retail (Omni Channel)
Job DescriptionThe Application Management Services Team provides Cloud-based Application, Infrastructure and Platform services to allow the Oracle Retail Global Industries Unit to deliver Cloud offerings for our products within the Retail vertical market. Expertise in Weblogic Application Server Adm...
Senior Application Security Engineer
You are either a security-minded software engineer who has been building modern services using a microservice architecture in an agile development environment or a development-interested security practitioner who understands security best practices, but wants to get closer to development and enginee...
Senior Cloud Security Engineer (Work From Home)
Security Engineer or Cloud Engineer, with a focus on public cloud security and network security required. Work closely with Cloud Engineers and Site Reliability Engineers to implement and manage advanced security technologies and tools on public cloud platforms, such as identity and access managemen...
Senior Applications Engineer
The Senior Applications Engineer will be responsible for providing engineering consultation and technical support to customers and trusted partners, integrating Sierra Wireless WWAN modules, and helping commercialize a variety of customer platforms. Minimum of a bachelor’s degree in electrical engin...
Senior Security Infrastructure Engineer
This position is responsible for combination of security design and implementation work, as well as design, implementation, and enhancements of Arrow corporate security infrastructure. Liaise between engineering and other departments on security related items. Knowledge of Private Cloud based secure...
Application Security Engineer - Remote
Conduct security assessments that require expertise of our organization's applications using both Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) methodologies. The Application Security Engineer must understand development, coding, security engineering, and...
Experienced Software Developer
As a Software Developer at Vynyl, you'll be working with a group of project managers, producers, designers, and other engineers to build great software and sustainable infrastructure on behalf of our clients. Vynyl delivers high-fidelity software and design to leading companies in finance, healt...