Application Security Lead Engineer

FICO (NYSE: FICO) is a leading global analytics software company, helping businesses in 100+ countries make better decisions. Join our world-class team today and fulfill your career potential!

The Opportunity

“FICO is seeking an Application Security Engineer to join our growing Information Security Office. This is a full-time regular position, and a great opportunity for an individual with strong web development skills or great interest in security that would like to move into the exciting field of application security." - Hiring Manager.

What You’ll Contribute

• Collaborate with engineers, consultants, and leadership to address security risks and provide mitigation recommendations within the SDLC.
• Perform hands on security testing of products and services to proactively discover risk and track them to resolution.
• Perform validation of security controls to insure adherence with compliance and industry best practices.
• Understand, balance, and communicate business risk with security risk.
• High level of personal integrity, with the ability to professionally handle confidential matters, and reflect appropriate level of judgment as it pertains to security.
• Ability to understand business requirements and apply security without adversely affecting the desired functionality.
• Includes keeping better communication with other engineers, consultants, and leadership to conduct other job duties in the above as a team.
• Be the SME for Product Security process and help Product Security (AppSec) team members to complete the tasks assigned to them.
• Enable product stakeholders to perform Scans on Products using Tools like SAST, SCA, DAST, IaC and Secret Scanners.
• Triage and provide remediation recommendations for security issues.
• Work with Product team members to build/maintain security features and ensure that they make safe architectural and implementation choices.
• Continuous Security Analysis of FICO Products for Early Identification of Risks.
• Provide Expert Technical Guidance and hands on validation of secure development solutions.

What We’re Seeking

• Firm understanding of the Enterprise class application architectures that are highly scalable and reliable and the ability to secure them.
• Experience with multiple languages such as Java, C/C++,C Sharp, Python and understand how to detect and remedy related security issues such as OWASP top 10 and analyze them per the OWASP Testing Guide.
• Understanding of Open Source and 3rd Party Components and relevant security risks.
• Knowledge of Containerization Technologies such as Docker, Kubernetes and their security.
• Familiarity with Agile Methodology and related technologies such as JIRA and Confluence.
• Ability to scale security within the SDLC by automation using tools sets such as source code analysers, vulnerability scanners, configuration validation, and similar techniques.
• Experience with SAST/SCA/Container Security/DAST reviews and remediation.
• Ability to Perform Source code reviews on Java, C/C++, C Sharp and Python.
• Excellent communication and interpersonal skills with the ability to convey security needs to developers, peers and leadership.
• Solid foundation in Application Security.

Our Offer to You

• An inclusive culture strongly reflecting our core values: Act Like an Owner, Delight Our Customers and Earn the Respect of Others.
• The opportunity to make an impact and develop professionally by leveraging your unique strengths and participating in valuable learning experiences.
• Highly competitive compensation, benefits and rewards programs that encourage you to bring your best every day and be recognized for doing so.
• An engaging, people-first work environment offering work/life balance, employee resource groups, and social events to promote interaction and camaraderie.

Why Make a Move to FICO?

At FICO, you can develop your career with a leading organization in one of the fastest-growing fields in technology today – Big Data analytics. You’ll play a part in our commitment to help businesses use data to improve every choice they make, using advances in artificial intelligence, machine learning, optimization, and much more.

FICO makes a real difference in the way businesses operate worldwide:

• Credit Scoring — More than 90% of US credit decisions involve the FICO Score.

• Fraud Detection and Security — 4 billion payment cards globally are protected by FICO fraud systems.

• Lending — 3/4 of US mortgages are approved using the FICO Score.

Global trends toward digital transformation have created tremendous demand for FICO’s solutions, placing us among the world’s top 100 software companies by revenue. We help many of the world’s largest banks, insurers, retailers, telecommunications providers and other firms reach a new level of success. Our success is dependent on really talented people – just like you – who thrive on the collaboration and innovation that’s nurtured by a diverse and inclusive environment. We’ll provide the support you need, while ensuring you have the freedom to develop your skills and grow your career. Join FICO and help change the way business thinks!

Learn more about how you can fulfil your potential at www.fico.com/Careers

FICO promotes a culture of inclusion and seeks to attract a diverse set of candidates for each job opportunity. We are an equal employment opportunity employer and we’re proud to offer employment and advancement opportunities to all candidates without regard to race, color, ancestry, religion, sex, national origin, pregnancy, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. Research has shown that women and candidates from underrepresented communities may not apply for an opportunity if they don’t meet all stated qualifications. While our qualifications are clearly related to role success, each candidate’s profile is unique and strengths in certain skill and/or experience areas can be equally effective. If you believe you have many, but not necessarily all, of the stated qualifications we encourage you to apply.

Information submitted with your application is subject to the FICO Privacy policy at https://www.fico.com/en/privacy-policy