Sr. Application Security Engineer

Syncro is a B2B SaaS company serving the Managed Services Provider industry with a platform that helps businesses manage operations and client services. The Senior Application Security Engineer will own the organization’s application security posture, improve security across the platform, advise on security architecture, and support compliance activities. The role also involves vulnerability management, incident investigation, security audits, and employee security training.

Responsibilities:

• Manage application security, including secure coding practices, vulnerability management, and penetration testing
• Contribute fixes to vulnerabilities within our codebases and infrastructure
• Assist teams on security architectural decisions and testing
• Participate in security audits and risk assessments
• Participate in compliance activities such as SOC 2 audit
• Investigate security incidents and breaches
• Help train employees on information security best practices

Requirements:

• Strong proficiency in an object oriented design using programming languages such as, C#, Java, Golang, etc
• Familiarity with version control systems (e.g., Git)
• Experience with relational database systems such as PostgreSQL, MySQL or Microsoft SQL Server and non-relational systems such as DynamoDB, MongoDB, etc
• Strong understanding of information security principles and practices
• Hands on experience managing application security across multiple engineering teams
• Experience managing bug bounty programs
• Managed vulnerability management programs and reducing vulnerabilities across software stack
• Experience in investigating security incidents and breaches
• Experience training employees on information security best practices
• Experience in conducting security audits and risk assessments
• Participated in or Managed compliance audits such as SOC 2, HIPAA, etc