RYZ Labs
Application Security Engineer
Remote
Contractor
#Engineering
#Security Consulting
#Architecture
#Threat Modeling
#Security
#Code Reviews
#SSDLC
#Security Testing
#CI CD Pipelines
#Training
RYZ Labs is looking for a Application Security Engineer
ContractorMid-LevelRemoteEngineeringSecurity ConsultingArchitectureThreat ModelingSecurityCode ReviewsSSDLCSecurity TestingCI CD PipelinesTrainingEnglishRemote work
Remote position (only for professionals based in Argentina or Uruguay)
RYZ Labs is currently looking for an Application Security Engineer to join the team of our partner, a major company in the hospitality industry. They are expanding their Information Security team and are in search of a dynamic and self-motivated Application Security Engineer to join their global Information Security team.
Responsibilities:
- Work as an internal security consultant to help product & engineering teams understand the security risk and advise them on best practices.
- Design and implement secure architecture solutions for applications and systems.
- Conduct threat modeling exercises to identify and mitigate potential security threats.
- Document and communicate threat modeling findings and recommendations.
- Perform periodic Security Assessments and code reviews to ensure compliance with SSDLC practices.
- Perform proactive research to detect new attack vectors and pentest internal and external apps.
- Implement security controls and best practices within CI/CD pipelines. Automate the security testing tools and processes within the CD/CI pipeline.
- Develop security tools and security metrics.
- Manage and Oversee vulnerability disclosure program by coordinating with external researchers to validate and triage reported vulnerabilities.
- Develop and maintain security standards and guidelines for application development.
- Develop and deliver Appsec training programs for developers and infra teams.
- Promote a security-first mindset across development teams.
- Participate in on-call rotation and lead security incident response.
Basic Qualification:
- Minimum 3-5 years of experience in secure software development, Security Architecture, threat modeling, or related roles.
- Relevant Professional certifications such as CISSP, OSCP, GWEB, CREST-CWAT or similar are highly desirable.
About RYZ Labs:
RYZ Labs is a startup studio built in 2021 by two lifelong entrepreneurs. The founders of RYZ have worked at some of the world's largest tech companies and some of the most iconic consumer brands. They have lived and worked in Argentina for many years and have decades of experience in Latam. What brought them together is the passion for the early phases of company creation and the idea of attracting the brightest talents in order to build industry-defining companies in a post-pandemic world.
Our teams are remote and distributed throughout the US and Latam. They use the latest cutting edge technologies in cloud computing to create applications that are scalable and resilient. We aim to provide diverse product solutions for different industries, planning to build a large number of startups in the upcoming years.
At RYZ, you will find yourself working with autonomy and efficiency, owning every step of your development. We provide an environment of opportunities, learning, growth, expansion and challenging projects. You will deepen your experience while sharing and learning from a team of great professionals and specialists.
Our values and what to expect:
- Customer First Mentality - every decision we make should be made through the lens of the customer.
- Bias for Action - urgency is critical, expect that the timeline to get something done is accelerated.
- Ownership - step up if you see an opportunity to help, even if not your core responsibility.
- Humility and Respect - be willing to learn, be vulnerable, and treat everyone that interacts with RYZ with respect.
- Frugality - being frugal and cost conscious helps us do more with less.
- Deliver Impact - get things done in the most efficient way.
- Raise our Standards - always be looking to improve our processes, our team, our expectations. Status quo is not good enough and never should be.
Copy Permalink
