Senior Product Security Engineer

Company Summary

As the leading global provider of enterprise software and information solutions for project-based businesses, Deltek helps organizations of all sizes maximize productivity and revenue. Our market leadership stems from the work of our diverse employees who are united by a passion for learning, growing and making a difference. At Deltek, we take immense pride in creating a balanced, values-driven environment, where every employee feels included and empowered to do their best work. Our employees put our core values into action daily, creating a one-of-a-kind culture that has been recognized globally. Thanks to our incredible team, Deltek has been named one of America’s Best Midsize Employers by Forbes, a Top Workplace by The Washington Post and a Best Place to Work in Asia by World HRD Congress. www.deltek.com **

Business Summary**

Deltek Replicon Engineering and Technology team builds best-in-class solutions to delight customers and meet their business needs. We are laser-focused on software design, development, innovation and quality. Our team of experts has the talent, skills and values to deliver products and services that are easy to use, reliable, sustainable and competitive. If you're looking for a safe environment where ideas are welcome, growth is supported and questions are encouraged – consider joining us as we explore the limitless opportunities of the software industry. **

Position Responsibilities**

• Perform Application Security testing on all Deltek products.
• Collaborate with development and engineering to ensure security throughout the Software Development Lifecycle (SDLC).
• Review and update Threat Models.
• Use various application security tools and be able to interpret the results, including SAST, SCA, MAST, and DAST.
• Ensure security processes are applied, maintained, and improved throughout the SDLC.
• Proactively analyze results from our security tools to provide meaningful results to our different product teams and engineers.
• Identify false positives or misconfigurations that can improve tool outputs.
• Lead remediation and continuous improvement across the application security posture with effective countermeasures and targeted mitigations.
• Develop clear risk insight from analysis of application security findings.
• Manage and monitor security throughout product lifecycle from development to operations with a DevSecOps mindset.
• Ability to perform work after normal business hours.
• Keep up to date with application security trends.

Qualifications

Desired Education & Experience:

• Bachelor’s Degree in related field (Computer Science, Cybersecurity, etc.) or equivalent experience.
• Security certification – CompTIA, CSSLP, GIAC, ISC2, etc.
• 5+ years’ experience in application security and/or application development with a focus on security (i.e., security champions).

Technical Knowledge and Skill:

• Strong knowledge of security and best practices.
• Experience with Secure SDLC tools including SAST, SCA, and DAST.
• Experience with security for SaaS/Cloud-delivered products.
• Skill with one or more programming or scripting languages (e.g., Java, VB, C#, C++, Ruby, bash, PHP, Python, PowerShell, etc).
• Software development background (Web or Mobile).
• Experience with security automation.
• Experience with vulnerability management processes.
• Credibility and high professionalism.
• Strong analytical and creative problem-solving skills.
• Strong verbal, written and presentation skills; collaborative, innovative and curious.
• Attention to detail and follow through on tasks.
• Position will work closely with Deltek staff in the Philippines, US, and EU.

Travel Requirements

No **

Applicant Privacy Notice

**Deltek is committed to the protection and promotion of your privacy. In connection with your application for employment with us at Deltek, it is necessary for us to collect, store and use information about you (“Personal Data”) to administer and evaluate your application. We are the “controller” of the Personal Data you provide us and will process any such Personal Data in accordance with applicable law and the statements contained in this Employment Candidate Privacy Notice . Additionally, we have not sold and do not sell Personal Data you provide to us through the job application process.