Description

Senior Security Engineer, Product Security

What if you could shape the future of work and be part of the team that creates the digital workforce of tomorrow?  We are the leaders in Robotic Process Automation and build the technology that lets enterprises across the world, create software robots, that can be trained to interact with applications like human users do. Our customers and partners include many Fortune 1000 companies. We are a not-so-young, profitable and well funded organization that’s been named as the fastest growing enterprise technology company.

This is a perfect moment to join us and have an impact in an area that’s core to our ability to win in the marketplace and contribute to company’s success

Scope of Responsibilities

• Identify vulnerabilities:
  • Engage with UiPath development teams in assessing security posture of UiPath products and services.
  • Leverage your own skills, external vendors and internal resources and tools to conduct comprehensive vulnerability assessments in first party and third party code.
• Educate stakeholders:
  • Help articulate the impact of identified vulnerabilities to development teams.
  • Participate in discussions and identifying remediation options.
• Evolve product security management maturity:
  • Bring consistency in tracking, scoring, reporting of vulnerabilities across UiPath product line.
• Enable a shift-left culture:
  • Integrate security tools (new and existing) into how software is developed at UiPath.
  • Identify opportunities to build libraries and frameworks that can be used by development teams to address commonly occurring patterns of vulnerabilities.
  • Identify opportunities to enrich secure development training material.
  • Identify opportunities for threat modeling and design reviews.

Other Duties

• Security Advisory: Help UiPath customers and internal stakeholders understand the impact of vulnerabilities in first party and third party code used in UiPath products
• Pre-Sales Support: Help pre-sales teams answer customer’s technical product security concerns where existing documentation and process do not suffice
• Feedback into product team: Build insights into product security feature gaps and work with security product managers to get them on a roadmap for future iterations
• Special Projects: Engage as a dedicated security resource on special projects

Must have

Proven track record (10+ years experience) in the application security space, delivering meaningful contributions to an application security program in a rapidly growing software development organization. 

Strong understanding and evidence of knowledge in the following areas

• Security of windows applications and services (C/C++ code)
  • Memory management related vulnerabilities

• Security of Web Applications (.Net code)
  • AuthN, AuthZ and other OWASP categories
• Use of manual and automated techniques for finding vulnerabilities
  • Static and Dynamic Analysis tools
• Scoring and Analysis of Vulnerabilities

• Scoping and planning of Vulnerability assessments

• Stellar teamwork and collaboration skills

• Proven track record of effectively working with remote teams

• Proven ability to wear multiple hats, prioritize, not get stuck, and adapt in an environment that’s growing and changing fast

Nice to have

• Prior experience in cloud native applications built on Azure and GCP
• Public speaking and authoring of open source contribution in security tools, libraries, training and documentation area

You’d be part of the strongest security and compliance management team in the world - we only hire the top 1% of the top 1%.

At UiPath, we value a range of diverse backgrounds experiences and ideas. We pride ourselves on our diversity and inclusive workplace that provides equal opportunities to all persons regardless of race, color, religion, sex, sexual orientation, gender identity and expression, national origin, disability, military and/or veteran status, or any other protected classes.