Software Engineer II* Job in Washington, District Of Columbia US
The Blackboard Learn Product Security Team is responsible for the security and availability of products offered by the Learn division including Blackboard Learn, Blackboard Campus Edition and Vista, Xythos, and ANGEL.
Blackboard is looking for an Application Security Engineer to ensure that our web services, applications, and platform are designed and implemented to the highest standards. If you enjoy analyzing the security of applications and services, discovering and addressing security issues, collaborating with customers and employees worldwide, quickly reacting to new threat scenarios, this position will provide you with a challenging opportunity.
Responsibilities
- Investigate and respond to third-party reported security vulnerabilities
- Coordinate security testing, including definition of scope, coverage, and management of cross-functional remediation plans
- Perform manual penetration testing and verification of applications and web services
- Leverage automated tool results to support manual analysis
- Scripting experience to continue build-out of automation suite for security regression testing
- Partner with development teams to carry out Application Security Reviews
- Work cooperatively with engineers to ensure that security needs are met in their design
- Provide advice and consultancy on risk assessment, identification of relevant threats (threat modeling) and fixing vulnerabilities
- Architect comprehensive strategic designs for relevant problems, specifically to mitigate risk
- Develop training materials for general security awareness and specific security engineering training
- Share architectural and technical guidance with product development team while maintaining a thorough understanding of products
Qualifications
- Bachelor's Degree in Computer Science or related field
- Programming experience in Java
- Knowledge of security testing tools and methodologies.
- Minimum of 3 years experience with any combinations of the following: penetration testing, automation, threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system and network security
Preferred Qualifications
- Familiarity with Blackboard Learn products
- Technical knowledge in web server, application server, operating system and network security
- Exhibit a proactive, solutions based and resourceful approach
- Experience building scalable infrastructure software or distributed systems
- Possess self-drive to keep moving things forward even in the face of ambiguity and imperfect knowledge (avoid "analysis paralysis")
- Strong sense of ownership, urgency, and drive
- Sharp analytical abilities and proven design skills