Senior Application Security Developer

Senior Application Security Developer
AVEVA is a global leader in industrial software. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life - such as energy, infrastructure, chemicals and minerals - safely, efficiently and more sustainably.

We're the first software business in the world to have our sustainability targets validated by the SBTi, and we've been recognized for the transparency and ambition of our commitment to diversity, equity, and inclusion. We've also recently been named as one of the world's most innovative companies.

If you're a curious and collaborative person who wants to make a big impact through technology, then we want to hear from you!

Position: Senior Application Security Developer

Qualifications: Experience in researching and identifying new threats, vulnerabilities and risks for Cloud-native environments

Location: Lake Forest, California/Calgary - Hybrid

Employment type: Full-time regular (flexible working options available)

About the role:

As part of the Research and Development function, the global Cloud DevOps team combines software development and cloud operations to protect and maintain Aveva's cloud applications.

As an Application Security Developer (AWS & Azure), you will have the opportunity to join a new team whose responsibility is to:

Pro-actively identify improvements to AVEVA's Cloud security

Design solutions to resolve

Create code to deliver these solutions

Identify potential new threats to Aveva's Cloud security

Maintain strong working relationships with AVEVA's Cloud Service Providers and internal development teams.

Support, enhance and automate:

The day-to-day security posture of AVEVA's Cloud solutions.

The landing zones and the global applications and services hosted within it.

The security tools and frameworks implemented in AVEVA's Cloud solution.

Working closely with your development and portfolio colleagues, together you will bring new solutions to the cloud following a standard framework to ensure they are operationally secure, stable, and scalable.

The global, 24x7 nature of the team means there may be a requirement for occasional work outside of the standard day and to be on call as part of a shared team rota.

Responsibilities:

As part of the security and platform team you will:

Perform security-focused code reviews

Use experience of secure application development to assess our cloud infrastructure

Test our cloud infrastructure for security holes

Monitor and analyse security relevant logs, alerts and events associated with security incidents.

Respond to security incidents as identified by users or security monitoring tools to mitigate threats.

Execute standard operating procedures in response to any security relevant logs, alerts and events.

Continuously improve security tooling and processes.

Build code to support automation and manage cloud setup e.g. Azure Functions, AWS Lambdas, Scripts etc…

Improve our cloud estate management processes and tooling.

Update the IaC code base which describes the cloud configurations

Providing support outside of core hours where required.

Work with development teams to advise and contribute to improvements to security, cost management and cloud compliance.

Stay current on security industry trends, tools and best practices.

Desired Qualifications:

Experience of developing secure applications

Experience of testing applications security

Experience of cloud security management in either AWS or Azure.

Experience of developing code to help automate/control the cloud environment in python/C#

Experience of operating/building services in either AWS or Azure.

Experience of writing infrastructure as code in either cloud formation/ARM/Terraform

Strong written, verbal and presentation skills, able to convey information clearly and concisely to technical and non-technical audiences.

Attention to detail, diligent and tenacious.

Excellent analysis and dissemination skills.

High degree of personal motivation and ability to self-manage.

Maintains and develops relevant industry and technology knowledge.

Working within an Information Security accredited framework e.g. ISO27001, 27017/18.

Desired Certification:

Security related certifications e.g. Microsoft's Security Operations Analyst, AWS Certified Security Specialist, CCSP.

Certifications in Azure and/or AWS e.g. AWS Solutions Architect, Solutions Architect for Azure.

AVEVA requires all successful applicants to undergo and pass a comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third party personal data may involve additional background check criteria.

AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business.
Come and join AVEVA to create the transformative technology that enables our customers to engineer a better world.
•