Senior Application Security Engineer - Duo
Automate application security testing techniques and tools including, but not limited to; static analysis, dynamic analysis, software composition analysis and container scanning to validate the security of Duo products and its development practices.
Conduct product security incident response investigations by being the first line of defence for internal and external Duo customers. Handle the coordinated vulnerability disclosure process to ensure security interests of end users and relevant stakeholders.
Liaison with product, customer support, sales and engineering teams to provide ad-hoc technical security expertise.
Educate and enable secure product development by providing guidance, implementing aid tools, building and operationalizing security guidelines.
Build and facilitate application security trainings for topics including; security vulnerabilities, remediation, secure coding practices, testing and tooling.
Evaluate and manage third party risk to Duo products and customers.