Senior Security Engineer

Why We Work at Dun & Bradstreet

We are at a transformational moment in our company journey - and we're so excited about it. Each day, we are finding new ways to strengthen our award-winning culture, and to accelerate creativity, innovation and growth. Our purpose is to help customers improve business performance with Dun & Bradstreet's Data Cloud and Live Business Identity, and we're wildly passionate and committed to this purpose. So, if you're looking to make an immediate impact at a company that welcomes bold and diverse thinking, come join us!

Team Overview: Product Security/Application Security team consists of consists of software security professionals. The team works very closely with business and the technology team to implement security controls and to ensure that the D&B products are free of any security defects and vulnerabilities. The team has subject matter experts in the following areas

1. Application Security Architect
2. Application Security Engineer
3. Penetration Testers
The Role:
Security Engineer will be a member of the Application Security team and will lead multiple initiatives for the firm. In this role, the individual will use their deep experience with application security and will contribute towards building the application security roadmap. In addition, they possess a solid understanding of secure SDLC concepts and application security testing e.g. DAST, pen testing etc. The understanding of key application security concepts such as authentication, authorization, encryption, key management is highly desirable.
The individual will be responsible for implementing software security controls as part of the secure SDLC pipeline and will achieve automation and scalability to support the D&B portfolio.
The individual will also interact with businesses on a regular basis and will generate appropriate KPI/KRI's to discuss the effectiveness and status of the program.

Key Responsibilities:
• Strong background in application security and well informed on key application security controls
• Develop SecDevOps practices by implementing key controls (SAST/DAST/SCA) in the SDLC
• Work with the team on developing the appsec roadmap for the firm
• Perform Pen Test on key D&B products and applications
• Conduct and perform vulnerability analyses on web applications.
• Perform dynamic application security testing (DAST) before applications are deployed in production
• Configure appsec tools (Burp suite enterprise) to enable workflow automation and integration with devops tools e.g. Jenkins, JIRA
• Review application incidents and work closely with the DevOps team in any follow up investigation or remediation.
• Manage external independent Application Security Testing and ensure timely remediation of issues.
• Identify all vulnerabilities originating from third party dependencies and ensuring timely remediation.
• Identify and develop KPIs to show the progress of overall application security program and identify opportunities for improvement.
• Able to work independently with minimal supervision
• Excellent communication skills - written, verbal, presentation and interpersonal
• Willing to learn new skills and implement new technologies.

Dun & Bradstreet is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex, age, national origin, citizenship status, disability status, sexual orientation, gender identity or expression, pregnancy, genetic information, protected military and veteran status, ancestry, marital status, medical condition (cancer and genetic characteristics) or any other characteristic protected by law.

We are committed to Equal Employment Opportunity and providing reasonable accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with Dun & Bradstreet and need special assistance or an accommodation to use our website or to apply for a position, please send an e-mail with your request to [email protected]. Determination on requests for reasonable accommodation are made on a case-by-case basis.

Please note that all Dun & Bradstreet job postings can be found at https://dnb.wd1.myworkdayjobs.com/Careers and all communication from Dun & Bradstreet will come from an email address ending in @dnb.com.