Team Overview:

The AppSec Team focuses on building secure mobile, web and cloud applications throughout their development lifecycle, from start to finish. AppSec is a proactive approach to security that help prevents threats at the initial stages rather than a reactive approach.

As an Application Security Engineer at TAL, you will be responsible for ensuring the security of our applications by implementing and maintaining robust security measures at TAL. You will work closely with development teams to identify and mitigate security vulnerabilities throughout the software development lifecycle. You will also foster security awareness and DevSecOps culture, providing security training to development teams.

Key Responsibilities:

• Ascertain a holistic understanding of TAL’s systems, development workloads and lifecycles.
• Create and update software application security policies and procedures.
• Work closely with the TAL Cyber team to implement security best practices and standards to protect sensitive data and ensure compliance with regulations.
• Collaborate with development teams to integrate security controls into the software development process.
• Conduct security assessments on applications to identify and remediate vulnerabilities.
• Drive response to security incidents, conducting root cause analysis and implementing corrective actions.
• Analyse application code and recommend solutions to identified security issues.
• Execute planned and ad-hoc security scans of software applications, and interpret results for development teams.
• Maintain documentation related to application security processes and controls.
• Providing application security guidance, coaching, and training to development teams and other stakeholders.
• Ensuring the adoption and implementation of application security tools in the DevSecOps lifecycle.
• Gather, manipulate and report on data from application security tools programmatically.
• Work with vendors to tailor application security tools to fit TAL workloads. 
• Stay up-to-date on the latest security threats and trends to proactively address potential risks and educate development teams.

What you’ll do

• Develop and maintain in depth understanding of the Commercial segment’s processes, systems, technologies, data, customers, consumers, partners.

• Act as the primary local security contact / advisor for key stakeholders within the Commercial segment.

• Advise Security Leadership in decision making for and affecting the Commercial segment.

• Analyse and manage security compliance requirements based on industry standards, national and international regulatory framework and internal policy framework.

• Proactively identify non-conformities and areas of potential improvement and facilitate development of pragmatic solutions to address issues, utilizing the security assessments and observations processes.

• Engage with clients and customers as needed to assist the business to achieve its objectives with pre and post sales activities (e.g. explain our security program, support external audits, support bids/RFP process, assist in customer communication of security incident, etc).

• Participate in BU related conferences, client facing engagement, industry forums to represent the Security program.

• Provide regular and timely reporting on the status of information security across the Commercial segment.

What experience you need 

• 5+ years experience within the security industry.

• Bachelor’s degree or an equivalent combination of education and experience required.

• Strong communication and presentation skills demonstrated by your experience in presenting and communicating at all levels within the organization and senior management. An ability to translate complex technical security concepts into business-friendly communications, especially covering cloud usage.

• Ability to independently influence others in order to achieve objectives.

• Ability to work collaboratively within a team as well as independently and autonomously, and engage stakeholders as required, to own and carry on end-to-end projects and initiatives.

• Strong ability to build and maintain trusting relationships with internal and external customers and

• always demonstrate good judgment, integrity and actively collaborates and commits to the success of others.

• Knowledge and experience of Information Security Risk and Security governance.

• A solid understanding of security best practices and international standards such as ISO2700 and PCI DSS and NIST.

• Demonstrable experience of driving operational implementation of policies and processes.  

  What could set you apart

• Previous experience as a Business Information Security Officer (BISO).

• Experience working in a matrix environment with globally diverse team members.

• Experience with Google Cloud (GCP).

• Previous experience working with external clients.

• Experience participating in IT Security audits, working with auditors..

• Experience obtaining or maintaining compliance certifications such as SOC2, PCI, ISO 27001.

• Understanding of cyber risks in the banking/ financial services sector.

• CISM, CISSP or related certification is a strong plus.

Primary Location:

Function:

Schedule:

Intuition Machines uses AI/ML to build enterprise security products. We apply our research to systems that serve hundreds of millions of people, with a team distributed around the world. You are probably familiar with our best-known product, the hCaptcha security suite. Our approach is simple: low overhead, small teams, and rapid iteration.

As a Senior Cyber Security Analyst, you will leverage your expertise in bot detection, web traffic analysis, and deep behavioral analytics to identify and investigate anomalous activities within our hCaptcha SaaS security platform.

Your primary responsibilities will include conducting advanced investigations of potential automated and human threats, analyzing complex patterns and behaviors, and developing actionable insights to enhance our security posture. Working closely with other teams, you will contribute to the continuous improvement of our AI/ML detection and response capabilities, ensuring that our platform remains resilient against evolving cybersecurity challenges.

By staying up-to-date with the latest developments in the cybersecurity landscape, you will play a pivotal role in fortifying the security of our platform, thereby protecting our Customers' data and digital assets.

What will you do:

• Monitor, identify and analyze events from a range of sources to spot threats and respond to such incidents with a sense of urgency.
• Collaborate with globally distributed teams to accomplish tasks.
• Assist in the collection of metrics to measure the efficiency of Security Operations functions.
• Audit the effectiveness of security measures to check if the systems meet the Security compliance norms.
• Assist in implementation of security policies and procedures.
• Fine-tune of the process and eventually update standard operating procedures for the team.
• Participate in various stages of incident investigations and threat hunting engagements.
• Work closely with internal company teams such as Product, Customer Success, etc.

What we are looking for:

• Exposure to web and API security, coding standards, WAFs, advanced persistent threat actors, botnets (off the shelf and custom) and attack mitigation.
• Hands-on SQL proficiency is a must-have.
• Knowledge of managing, securing and preparing production web environments with tools like Kubernetes.
• Familiar with Threat Hunting - Web/ API, web hacking, web data analysis or WAF hands-on experience.
• In-depth knowledge of the web technology and web application security field.
• Deep understanding of the cybersecurity threat landscape, and the attacker mindset.
• Experience in scripting and programming (JavaScript, Python, etc.).
• Interest in keeping up with industry trends and market demands to recommend product enhancements and new sources of intelligence.
• Demonstrated interest in working with data and metrics as applied to security.
• Be a great collaborator and communicator, stay curious and enjoy innovating. Nothing stands still in security.

Nice to Have:

• Familiarity with open source analytics and visualization tools like Grafana, Apache Superset.
• Experience red-teaming, especially developing bot-nets and whitehat hacking.
• Hands on knowledge on Web security modules and secure configuration.
• Hands-on experience and proficiency in API test automation and standardization.
• Experience and solid knowledge on computer and network security.
• Integrating security into build automation, deployment automation, test automation, SDLC orchestration, environment management, monitoring, and production.
• Mentor development teams, review pull requests, and guide evolution of the development pipeline.
• Experience with modern application packaging, deployment, containerisation, bug tracking tools and other supporting tools (Jenkins, Docker, Kubernetes, etc.).
• Familiar with ISMS (ISO/IEC 27001), SOC2, NIST Cybersecurity Framework, CIS Controls and Open Web Application Security Project.

What we offer:

• Fully remote position with flexible working hours.
• An inspiring team of colleagues spread all over the world.
• Pleasant, modern development and deployment workflows: ship early, ship often.
• High impact: lots of users, happy customers, high growth, and cutting edge R&D.
• Flat organization, direct interaction with customer teams.

We are committed to building an inclusive and diverse global workforce. We believe that the best way to learn, grow, and succeed, both as individuals and as a company, is to foster a culture that is fundamentally rooted in equality.

Join us as we transform cyber security, user privacy, and machine learning online!

Our Company

Changing the world through digital experiences is what Adobe’s all about. We give everyone—from emerging artists to global brands—everything they need to design and deliver exceptional digital experiences! We’re passionate about empowering people to create beautiful and powerful images, videos, and apps, and transform how companies interact with customers across every screen. 

We’re on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere in the organization, and we know the next big idea could be yours!

Creativity for All

Adobe is a place where exceptional people work – don’t just take our word for it, our employees have recently voted us #1 on the Great Place to Work list for the 10th consecutive year!

We’re proud to offer market leading employee benefits designed to suit your lifestyle. Some of the great benefits include health insurance, global days off, wellness fund, market-leading parental leave, access to our Employee Stock Purchase Program and programs designed to help continue to build your career.

We also proudly empower our employees to get involved with corporate social responsibility and offer a broad range of opportunities to make a bigger impact through philanthropy, employee, and community engagement.

We know that people are the differentiator in our business, and that's why we want to meet you.

A bit more about you

In the role of Security Compliance Specialist, Tech GRC you will be part of a critical hub for Sales, Legal, Engineering, Compliance, Operation, and Marketing teams in presenting Adobe's security posture and overcoming customer security objections and concerns.

Are you interested in leading Security Compliance efforts, seeing how the business works up close, and chipping in to ensure sales go through optimally for a product-based organization? Do you have experience in driving Information Security assessments internally or externally and talking with customers? Then this role is for you.

In this role you’ll be focusing on driving Australian Security Compliances as part of the APAC Security Compliance Program by collaborating with external assessors, government agencies, product development & operations teams, core security teams, and others. This job also blends an understanding of information security with evangelism, program management, business savvy, and an eye for detail with timely execution.

What you’ll do

• Perform the IRAP Readiness Assessment covering various cybersecurity guidelines of the Information Security Manual (ISM) for products looking for IRAP assessment.
• Present Readiness Assessment result reports to summarize the compliance objectives, key findings, and next steps to Partners and Management regularly.
• Coordinate with relevant partners to remediate key findings and prepare the products for external IRAP assessment.
• Oversight development of System Security Plan (SSP) documents for in-scope products.
• Continuously evaluate and drive upgrades of operational policies, procedures, and standard processes to meet ISM requirements.
• Review and coordinate Cloud Controls Matrix (CCM) updates and IRAP Cloud Security Assessment Report (IRAP Report) with assessors.

What you need to succeed

• Bachelor/Master degree or equivalent experience in Information Security/Cyber Security or related field.
• Minimum 5-8 years of related security compliance assessments, IT/Cloud auditing, and control testing experience.
• Must know Security Compliance frameworks (e.g. IRAP, Cyber Essential Eights, ISO, SOC 2, etc.)
• Sound knowledge of Cloud IT processes and Cloud IT infrastructure like AWS, Azure, GCP, etc.
• Hold certifications like CISA, IRAP Assessor, and others.
• Good interpersonal and highly developed communication skills

At Adobe, you will be immersed in an exceptional work environment that is recognized throughout the world on Best Companies lists. You will also be surrounded by colleagues who are committed to helping each other grow through our unique Check-In approach where ongoing feedback flows freely.

If you’re looking to make an impact, Adobe's the place for you. Discover what our employees are saying about their career experiences on the Adobe Life blog and explore the meaningful benefits we offer.

Adobe is an equal opportunity employer. We welcome and encourage diversity in the workplace regardless of gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, or veteran status.

Adobe is proud to be an Equal Employment Opportunity and affirmative action employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other applicable characteristics protected by law. Learn more.
 

Adobe aims to make Adobe.com accessible to any and all users. If you have a disability or special need that requires accommodation to navigate our website or complete the application process, email accommodations@adobe.com or call (408) 536-3015.

Adobe values a free and open marketplace for all employees and has policies in place to ensure that we do not enter into illegal agreements with other companies to not recruit or hire each other’s employees.