About the role
Our Mission
6sense's mission is to multiply what matters: growth, retention, and efficiency. We envision a future where companies, teams and people reach their full potential.
Our People
People are the heart and soul of 6sense. We serve with passion and purpose. We live by our Being 6sense values of Win as One Team, Stay Curious, Do The Right Thing, Own the Outcome, and Create Belonging. Every 6sensor plays a part in defining the future of our industry-leading technology. 6sense is a place where difference-makers roll up their sleeves, take risks, act with integrity, and measure success by the value we create for our customers. We want 6sense to be the best chapter of your career.
Job Title
Staff Security Engineer, AppSec
Organizational Reporting
Manager, Security Engineering
Function/Dept
Business Technology / Security
Purpose of the Job
As members of 6sense’s Security department, the Security Engineering team protects the platform. Application Security Engineers work closely with engineering teams, product managers (PM), and third-party entities to ensure that 6sense SaaS products are secure.
JOB DESCRIPTION
Responsibilities & Accountabilities
- Serve as mentor to other Security Engineers, providing guidance and support
- Ability and willingness to assist with Senior level responsibilities if needed
- Support and consult with engineering and product teams around application security vulnerabilities.
- Assist teams in reproducing, triaging, and addressing application security vulnerabilities identified through Pen Testing, SAST, DAST, or Dependency scans
- Take initiative and drive changes in our bug bounty program which position us as an industry leading security program
- Lead in development of automated security testing to validate that secure coding best practices are being used
- Lead application security reviews and threat modeling, including code review and dynamic testing
- Lead and influence cross-functional changes across the Security organization
- Have significant ownership in and evangelize security training with development teams