Application Security Lead

When you join Accurate Background, you’re an integral part of making every hire the start of a success story. Your contributions will help us fulfill our mission of advancing the background screening experience through visibility and insights, empowering our clients to make smarter, unbiased decisions.

The main purpose of the Application Security Manager at Accurate Background is to be the subject matter expert on application security testing, providing security oversight, best practices, and helping integrate security into Accurate’s system development lifecycle. This role reports to the Director of Global Security.

• Manage and provide leadership to a team of security engineers, including hiring, training and performance management. 
• Collaborate with Development & DevOps engineers to evaluate and operationalize security tools integrated in development environments.  
• Collaborate with product managers, scrum masters, and application development to identify and inject security requirements into Acceptance Criteria of epics/ stories.  
• Provide subject matter expertise on secure coding practice relating to SDLC, assist in building and rolling out related guidelines and standards, Conduct code scanning, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Software Composition Scanning (SCS), Infrastructure as Code (IaC), Dynamic Application Security Testing (DAST) and perform manual source code reviews for high-risk components.  
• Research and monitor emerging threats and vulnerabilities, understand current industry and technology trends and opportunities, and assess their impact to applications and the business. Drive Risk Management and Security Compliance within the AppSec environment. 
• Participate in a review board to address false positives and provide application security governance. 
• Create documentation for application security metrics, policies, procedures, standards, guidelines and training.  

• High level of expertise in Application development and security acquired through educational qualifications in computer science, Cyber Security or related field and a minimum of 4 years of relevant experience. 
• A proven track record in providing expertise and guidance in developing cloud hosted applications with focus on security on C#, Java, Python, .Net, MongoDB, SQL Server, Oracle etc 
• Strong understanding of various computing systems including Cloud architecture (AWS/Azure/GCP) 
• Detailed knowledge of operating security tools such as SAST, SCA and DAST and - supporting teams to use them in the most effective ways. 
• Strong working knowledge of various information technologies including user authentication, authorization pattern and components including knowledge of MFA mechanisms and configuration. Good awareness of industry best practices 
• Data analysis, metrics development and reporting 
• Experience with working in a highly outsourced environment (both infrastructure outsourcing and security operations outsourcing) 

• CISSP, ISO 27001, CASE or relevant certifications 
• CISSP, CASE or relevant certifications 
• Experience with working in a highly outsourced environment (both infrastructure outsourcing and security operations outsourcing) 
• Demonstrated ability to take initiative and accountability for achieving results. 
• Effective communication skills with technical and non-technical staff 

The Accurate Way:

We offer a fun, fast-paced environment, with lots of room for growth. We have an unwavering commitment to diversity, ensuring everyone has a complete sense of belonging here. To do this, we follow four guiding principles – Take Ownership, Be Open, Stay Curious, Work as One – core values that dictate what we stand for, and how we behave.

Take ownership.

Be accountable for your actions, your team, and the company. Accept responsibility willingly, especially when it’s what’s best for our customers. Give others every reason to trust you, believe in you, and count on you. Rise to every occasion with your personal best.

Be open.

Be open to new ideas. Be inclusive of people and ways of doing things. Make yourself accessible and approachable, and communicate with genuineness, transparency, honesty, and respect. Embrace differences.

Stay curious.

Stay curious even as you move forward. Tirelessly ask questions and challenge the status quo in your pursuit of new ideas, ways to solve problems, and to continually grow and improve.

Work as one.

Work together to create the best customer and workplace experience. Put our customers and employees first—before individual or departmental agendas. Make sure they get the help they need to succeed.

About Accurate Background:

Accurate Background’s vision is to make every hire the start of a success story. As a trusted provider of employment background screening and workforce monitoring services, Accurate Background gives companies of all sizes the confidence to make smarter, unbiased hiring decisions at the speed of demand. Experience a new standard of support with a dedicated team, comprehensive technology and insight, and the most extensive coverage and search options to advance your business while keeping your brand and people safe.

Accurate is an equal-opportunity employer and is committed to hiring talented and qualified individuals with diverse backgrounds. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.

Accurate will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws.

Special Notice:

Accurate is aware of schemes involving fraudulent job postings/offers and/or individuals or entities claiming to be employees of Accurate. Those involved are offering fabricated employment opportunities to applicants, often asking for sensitive personal and financial information. If you believe you have been contacted by anyone misrepresenting themselves as an employee of Accurate, please contact [email protected].

- Please be advised that all legitimate correspondence from an Accurate employee will come from "@accurate.com" email accounts.

- Accurate will not interview candidates via text or email. Our interviews are conducted by recruiters and leaders via the phone, Zoom/Teams or in an in-person format.

- Accurate will never ask candidates to make any type of personal financial investment related to gaining employment with the Company.