View all jobs
Security Application Engineer (Application Security Team)
Sofia, SofiaRingSense AI is our proprietary AI solution. It’s designed to fit the business needs of our customers, orchestrated to be accurate and precise, and built on the same open platform principles we apply to our core software solutions.
The RingCentral Application Security team is a part of a larger CISO team. The area of responsibility of the application security team includes enablement and support for RingCentral’s Security Development Lifecycle (SDL) program. This includes development of infosec governance artifacts i.e., policies, standards and procedures for secure software development at RingCentral, leading security architecture reviews and threat modelings, developing security requirements, SAST/DAST/SCA testing and integration of these tools into the build and deploy process, penetration testing, managing bug bounty program.
We are looking for a Security Application Engineer with a strong understanding of web-application vulnerabilities, how they can be detected, exploited and remediated.
This role requires on-site presence at our office 4 days a week to support effective collaboration and teamwork.
Responsibilities:
Collaborate with Product Management, Engineering and Analytics teams to ensure RingCentral products, applications and tools support both security architecture and secure development standards
Drive adoption of security and privacy aware SDLC discipline across all organizations
Identify gaps in existing security architecture and collaborate with engineering to design, review and approve changes or enhancements
Enforce security guardrails for all RingCentral products and applications
Lead security risk assessments for proposed cloud and endpoint designs, architectures and solutions
Provide vulnerability remediation design and solutions
Provide clear, risk-based assessments of product security maturity including areas for improvement and if needed, identify stop-ship situations
Collaborate with Cloud platform and product architecture teams to embed security standards
Support integrations of automated security testing tools (SAST/DAST/SCA) into the build and deploy process
Provide support to engineering teams working with automated security testing tools
Lead annual and ad-hoc security assessments, which includes:
Security design review and threat modeling
Targeted security code review
Penetration testing
Coordinating efforts of external penetration testing consultants
Triage reports from the bug bounty platform, address them to responsible engineering teams
Qualifications:
Technical experience in product architecture, design, implementation
Expertise with product security design, review, implementation including threat modeling and risk assessment implications
Extensive experience with application testing- SAST/DAST, penetration testing
Secure design and implementation capabilities
Experience with open-source software including lifecycle management, vulnerability management tools
Excellent communication skills, both verbal and written; ability to condense complicated scenarios into simple, risk-based assessments, appropriately targeted for colleagues and upper management
Outstanding organizational and time management skills, desire to work within a highly collaborative team
Nice-To-Have:
WebRTC, Video and audio streaming
Video codecs
B.S. or equivalent in CS or EE
What we offer:
Well-coordinated professional team.
Cutting edge technologies, interesting and challenging tasks, dynamic project, great opportunities for self-realization, professional and career growth.
Additional Health and Life Insurance Package.
Employee Assistance Program.
25 vacation days.
200 BGN Digital Food Vouchers.
120 BGN Gross as part of the salary for Working Expenses Allowance.
RingCentral’s Engineering Team works on high-complexity projects that set the standard for performance and reliability at massive scale. What kind of scale? Millions of users today and hundreds of millions tomorrow. This is your chance to help imagine, develop and deliver products that raise the technological bar, and power human connections. If you’re a talented, ambitious, creative thinker, RingCentral is the perfect environment to join a world class team and bring your ideas to life.
RingCentral’s work culture is the backbone of our success. And don’t just take our word for it: we are recognized as a Best Place to Work by Glassdoor, the Top Work Culture by Comparably and hold local BPTW awards in every major location. Bottom line: We are committed to hiring and retaining great people because we know you power our success. RingCentral offers on-site, remote and hybrid work options optimized for the ways we work and live now.
About RingCentral
RingCentral, Inc. (NYSE: RNG) is a leading provider of business cloud communications and contact center solutions based on its powerful Message Video Phone™ (MVP™) global platform. More flexible and cost effective than legacy on-premises PBX and video conferencing systems that it replaces, RingCentral® empowers modern mobile and distributed workforces to communicate, collaborate, and connect via any mode, any device, and any location. RingCentral is headquartered in Belmont, California, and has offices around the world.
The RingCentral Application Security team is a part of a larger CISO team. The area of responsibility of the application security team includes enablement and support for RingCentral’s Security Development Lifecycle (SDL) program. This includes development of infosec governance artifacts i.e., policies, standards and procedures for secure software development at RingCentral, leading security architecture reviews and threat modelings, developing security requirements, SAST/DAST/SCA testing and integration of these tools into the build and deploy process, penetration testing, managing bug bounty program.
We are looking for a Security Application Engineer with a strong understanding of web-application vulnerabilities, how they can be detected, exploited and remediated.
This role requires on-site presence at our office 4 days a week to support effective collaboration and teamwork.
Responsibilities:
Collaborate with Product Management, Engineering and Analytics teams to ensure RingCentral products, applications and tools support both security architecture and secure development standards
Drive adoption of security and privacy aware SDLC discipline across all organizations
Identify gaps in existing security architecture and collaborate with engineering to design, review and approve changes or enhancements
Enforce security guardrails for all RingCentral products and applications
Lead security risk assessments for proposed cloud and endpoint designs, architectures and solutions
Provide vulnerability remediation design and solutions
Provide clear, risk-based assessments of product security maturity including areas for improvement and if needed, identify stop-ship situations
Collaborate with Cloud platform and product architecture teams to embed security standards
Support integrations of automated security testing tools (SAST/DAST/SCA) into the build and deploy process
Provide support to engineering teams working with automated security testing tools
Lead annual and ad-hoc security assessments, which includes:
Security design review and threat modeling
Targeted security code review
Penetration testing
Coordinating efforts of external penetration testing consultants
Triage reports from the bug bounty platform, address them to responsible engineering teams
Qualifications:
Technical experience in product architecture, design, implementation
Expertise with product security design, review, implementation including threat modeling and risk assessment implications
Extensive experience with application testing- SAST/DAST, penetration testing
Secure design and implementation capabilities
Experience with open-source software including lifecycle management, vulnerability management tools
Excellent communication skills, both verbal and written; ability to condense complicated scenarios into simple, risk-based assessments, appropriately targeted for colleagues and upper management
Outstanding organizational and time management skills, desire to work within a highly collaborative team
Nice-To-Have:
WebRTC, Video and audio streaming
Video codecs
B.S. or equivalent in CS or EE
What we offer:
Well-coordinated professional team.
Cutting edge technologies, interesting and challenging tasks, dynamic project, great opportunities for self-realization, professional and career growth.
Additional Health and Life Insurance Package.
Employee Assistance Program.
25 vacation days.
200 BGN Digital Food Vouchers.
120 BGN Gross as part of the salary for Working Expenses Allowance.
RingCentral’s Engineering Team works on high-complexity projects that set the standard for performance and reliability at massive scale. What kind of scale? Millions of users today and hundreds of millions tomorrow. This is your chance to help imagine, develop and deliver products that raise the technological bar, and power human connections. If you’re a talented, ambitious, creative thinker, RingCentral is the perfect environment to join a world class team and bring your ideas to life.
RingCentral’s work culture is the backbone of our success. And don’t just take our word for it: we are recognized as a Best Place to Work by Glassdoor, the Top Work Culture by Comparably and hold local BPTW awards in every major location. Bottom line: We are committed to hiring and retaining great people because we know you power our success. RingCentral offers on-site, remote and hybrid work options optimized for the ways we work and live now.
About RingCentral
RingCentral, Inc. (NYSE: RNG) is a leading provider of business cloud communications and contact center solutions based on its powerful Message Video Phone™ (MVP™) global platform. More flexible and cost effective than legacy on-premises PBX and video conferencing systems that it replaces, RingCentral® empowers modern mobile and distributed workforces to communicate, collaborate, and connect via any mode, any device, and any location. RingCentral is headquartered in Belmont, California, and has offices around the world.