Senior Application Security Engineer (M/F)
(Massy - France)
Founded in 2000, Ivalua is a global leader in cloud-based spend management solutions.
OUR COMPANY
At Ivalua, we are a global community of experts convinced that digital transformation makes supply chains more sustainable and resilient, while improving collaboration with suppliers. We achieve this through our cloud-based spend management platform, which enables hundreds of major brands to manage their spending and suppliers while optimizing their profitability, ESG performance (Environment, Social and Governance), reducing risks and improving their productivity. Driven by our passions and nourished by our shared ambitions, we give ourselves the means to meet challenges and create impactful experiences for our customers and partner ecosystem, while giving meaning to our teams.
Learn more on www.ivalua.com. Follow us on LinkedIn
THE OPPORTUNITY
CONTEXT: You will be part of the InfoSec team with the mission to build, maintain and continuously improve the security of our application, thus providing assurance of protection and security to our customers. Our team is operational, with a strong problem-solving spirit, capable of thinking holistically about implementation and delivering solutions to meet our customers' long-term challenges.
ROLE: We are currently looking for an Application Security Engineer to help secure Ivalua's SaaS application as well as the company's internet-facing applications. This role involves improving the SDLC process, maintaining and improving automated vulnerability analysis, conducting manual application-level security testing, orchestrating remediation plans and tracking vulnerability remediation progress through reports and dashboards. Additionally, the Application Security Engineer will be responsible for contributing to the deployment and continuous improvement of the Secure Architecture & Software Development program to ensure the security of Ivalua's SaaS platform.
WHAT YOU WILL DO WITH US
- Conduct manual penetration testing on Ivalua's SaaS product web applications, web services as well as critical or internet-facing web applications of the company
- Improve/optimize the configurations of application security tools (SAST, DAST, SCA) to reduce false positives/negatives
- Write and maintain internal automated scripts to complement scan tool gaps and industrialize manual security testing
- Act as the primary point of contact for analysis, discussion and review of EMEA customer technical audit results
- Promote and support the implementation of security best practices within the development cycle in the R&D department, including security design reviews and security testing of major product changes or improvements
- Support the analysis, reporting, tracking and retesting of security vulnerabilities reported by various sources (customers, internal and external audits) and provide advice to developers to fix them in accordance with Ivalua standards
- Contribute to the development, improvement, maintenance and delivery of a security training program for developers and maintain secure development guidelines
- Act as an application security expert and stay informed of new vulnerabilities, threats, risks, tools and techniques
YOUR PROFILE
If you have the experience and skills below, this role could be for you.
Skills and Experience:
- At least 5 years of hands-on experience conducting penetration testing on web applications and web services
- Proven experience integrating security into the software development lifecycle (security by design, security code reviews, security testing, etc.)
- Proficiency in scripting, client-side programming and query languages (such as Python, JavaScript, SQL)
- Experience with industry-recognized application security tools (BurpSuite, SQLMap, Invicti, Checkmarx, etc.)
- A qualification in offensive security or proof of beginning preparation for such a certification (e.g. OSCP, OSWE, GPEN, GWAPT, CPTS, Hack-the-Box labs or root-me challenges or similar) is preferred but not required
- Ability to manage multiple tasks, prioritize and meet deadlines
Desired Qualities:
- Excellent interpersonal, communication and organizational skills
- Team spirit and ability to collaborate effectively with a wide range of stakeholders
- Initiative, reliability and ability to work independently with minimal supervision
WHAT HAPPENS NEXT
If your application matches the desired skills for this role, our recruitment team will contact you to schedule an initial phone conversation. Take a step further towards achieving your goals - apply today!
A dedicated recruiter will guide you through each step of the recruitment process. We are here to support you!
Our recruitment process is designed to assess your skills through a series of personalized interviews with our teams. Interviews will be conducted virtually and in person at our offices.
WHAT YOU WILL FIND AT IVALUA
- A "Hybrid" model (3 days on-site, 2 days remote),
- We are a team driven by the desire to push the boundaries of product and technological innovation,
- A constantly growing private company,
- A stable and profitable company,
- Every week, the opportunity to get together over a meal provided by the company,
- Thrive by pursuing your goals through a powerful team spirit, conducive to creativity and productivity,
- Unlock your professional potential through our training and career development program,
- Join a dynamic and international team of experts in their fields, and collaborate with people passionate about their work and guided by a shared vision,
- Experience an inclusive work environment open to diversity, where your contribution will be appreciated and valued,
- Participate in numerous events organized by the company (sports competitions, musical events and team building),
- Praised by its employees, Ivalua has been named by Comparably (https://www.comparably.com/companies/ivalua)
Driven by our differences - Your energy is our strength!
United by our values, we celebrate diversity and equity in all their forms to build an inclusive work environment. To help our customers make their supply chains more efficient, sustainable and resilient, we rely on our international teams with diverse backgrounds, skills and perspectives. We believe in equal opportunity and diversity as drivers of innovation, fostering a spirit of inclusivity, a productive and pleasant work environment, and offering fulfilling career prospects for all Ivaluans.
Explore Ivalua culture - watch this video to learn more!
#LI-MV1 #LI-HYBRID