Information Security Engineer II

Job Description

Are you our TYPE Brands constantly seek to achieve deeper appeal and connection with their target audience and customers. They express themselves in unique ways, in ways that are meaningful, attractive and compelling to their audience. Fonts play a key role in this and are central to every brand s visual identity and expression.Headquartered in the Boston area of the United States and offices across four continents, Monotype is one of the world s leading font companies. It s a trusted partner to the world s top brands and was named One of the Most Innovative Companies in Design by Fast Company, Monotype brings brands to life through type and technology that consumers engage with every day. The companys rich legacy includes a library that can be traced back hundreds of years, featuring famed typefaces like Helvetica, Futura, Times New Roman and more. Monotype also provides a first-of-its-kind service that makes fonts more accessible for creative professionals to discover, license, and use in our increasingly digital world. We work with the biggest global brands, and with individual creatives, offering a wide set of solutions that make it easier for them to do what they do best: design beautiful brand experiences. Want to learn more about who we are and how you can become part of our team Visit us at www.monotype.comMonotype Solutions India is a strategic center of excellence for Monotype and is a certified Great Place to Work . It is based in NOIDA, Sector 125 (Delhi/NCR). The focus of this fast-growing center spans Market Research, Research in areas of Artificial Intelligence and Machine learning, Product Management, Product Development, Product Marketing, Revenue Marketing, Customer Success and Enterprise Business Solutions.This person partners with the Engineering organization to ensure that security is being properly considered during the planning phase of our development lifecycle and performs the assessments of our code during and post development to ensure our applications are secure in both implementation and deployment. What you ll be doing:
• Analyzes application code information in multiple languages (PHP, C, C, etc.)
• Identifies and prioritizes vulnerabilities within application code
• Performs application layer penetration tests, dynamic vulnerability analysis, and red team exercises
• Provides development engineering with guidance on threat modeling and targeted training on secure coding
• Partners with development engineering to ensure security is considered in the design processes for all applications
• Partners with engineering architects to ensure security in design
What we re looking for:
• 3-6 years experience (can be in bug bounty or other freelance work)
• Preferred certification in one or more of an industry recognized security certification such as OSCP, CEH, CSSLP.
• Must have experience in development languages such as PHP, C, C
• Deep technical understanding of application code and development techniques
• Expertise in OWASP recommendations
• Excellent technical communication and analytical skills.
• Excellent time management and organization skills with an aptitude towards creative problem solving.
• Proven ability to develop successful partnerships with internal and external stakeholders.
• Experience leading an engineering organization in threat modeling
• Highly developed oral and written communication skills; strong presentation skills.
• Experience supporting global organizations preferred
• Experience working in a bug bounty or capture the flag desired
Monotype is an Equal Opportunities Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.#LI-DNI,

Keyskills :
center of excellencered teamactive directorytime managementchange managementmarket researchcompliancenetworking