Product Security Engineer 2 (4902)
About Blackhawk Network:
Today, through BHN’s single global platform, businesses of all kinds can tap into the world’s largest network of branded payment solutions. BHN helps businesses grow revenue, increase loyalty, motivate and reward their teams, disburse funds and engage consumers.Branded payment solutions include the issuance and distribution of gift cards, egifts, corporate payouts and rewards, along with the technology to deliver these products in seamless, integrated ways. BHN’s network spans the globe with more than 400,000 consumer touchpoints.
Learn more at BHN.com.
Overview:
Are you passionate about your work? Are you looking to take the next leap in your career? Are you looking for an energetic start-up environment with the security of a profitable, growing company? Are you looking for Life/Work balance? Are you looking to be a key contributor in the World’s leading Anytime/Anywhere Payment Network?If you answered ‘Yes’, please read on…your career is at Blackhawk Network, and we want to talk to you!
Blackhawk Network’s software solutions underpin our success and include world-class transaction acquisition, switching and routing, real-time settlement, pre-paid card processing, fulfillment and business analytics components. State of the art consumer web sites, emerging mobile apps, and high-speed transaction processing with volume spikes that make Pikes Peak seem small are all part of a challenging and rewarding technology environment.
We are looking to hire a Product Security Engineer to join our Product Security team and who will be a key addition to the Chief Information Security Officer’s organization. This position is remote. The ideal candidate will be a technical self-starter.The candidate will understand the impact and security decisions that need to be made to keep our products and applications secure, and then be able to articulate those to engineers and business teams outside the CISO organization.
Responsibilities:
Provider will perform the following tasks as part of delivering Product Security Support Services.- Perform security architecture reviews and threat modeling
- Perform application security assessments and penetration testing
- Deploy/on-board application and product security tools
- Provide Product Security thought leadership across the company
- Provide support for product security commercial off-the-shelf (COTS) and in-house built applications.
- Perform code reviews of applications, manually and using static analysis tools.
- Work with development teams to find ways to integrate security testing into CI/CD pipeline
- Triage vulnerabilities from bug bounty and dynamic web scanning. Work with product owners on remediating the findings
- Design and develop security testing to be used for improving the triage/validation process
- Provide remediation guidance and recommendations to programmers and administrators based on severity and impact on product.
- Train programmers on application security basics and best practices
Qualifications:
- - Strong Product Security experience
- Experience in S-SDLC and Threat Modeling
- Strong passion for Product Security
- 5-10 years of experience working on a security team
- Ability to program/script in at least one language; Python Django (preferred), Java, JavaScript, BASH, PowerShell
- Analytical with strong problem-solving skills and exercises good, balanced decision making
- Excellent written and verbal communication skills
- Experience with Payment, Ecommerce and FinTech systems
- Experience working in software development
- Bug bounties or responsible disclosure awards
- Certifications – SANS GIAC, CISSP, ISC2, ISACA, OSCP/OSCE
- BS in Computer Science, Electrical Engineering, or related experience
EEO Statement:
Blackhawk Network provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.Blackhawk Network believes that diversity leads to strength. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training