Application Security Engineer

Senior Application Security Engineer (M/F)

(Massy - France)

Founded in 2000, Ivalua is a global leader in cloud-based spend management software.

OUR COMPANY

At Ivalua, we are a global community of experts convinced that digital transformation makes supply chains more sustainable and resilient, while improving collaboration with suppliers. We achieve this through our cloud-based spend management platform, which enables hundreds of major brands to manage their spending and suppliers while optimizing their profitability, ESG (Environmental, Social, and Governance) performance, reducing risks, and improving productivity. Driven by our passions and fueled by our shared ambitions, we empower ourselves to meet challenges and create impactful experiences for our customers and our partner ecosystem, while giving meaning to our teams.

Find out more at . Follow us on LinkedIn

THE OPPORTUNITY

CONTEXT: You will be part of the InfoSec team with the mission to build, maintain, and continuously improve the security of our application, thereby providing assurance of protection and security to our customers. Our team is operational, with a strong problem-solving spirit, capable of thinking holistically about implementation and providing solutions to meet our customers' long-term challenges.

ROLE: We are currently looking for an Application Security Engineer to help secure our Ivalua SaaS application as well as the company's internet-facing applications. This role involves improving the SDLC process, maintaining and enhancing automated vulnerability scans, performing manual security tests at the application level, orchestrating remediation plans, and tracking the progress of vulnerability remediation via reports and dashboards. Additionally, the Application Security Engineer will be responsible for contributing to the deployment and continuous improvement of the Secure Architecture & Software Development program to ensure the security of the Ivalua SaaS platform.

WHAT YOU WILL DO WITH US

• Perform manual penetration tests on the web applications of the Ivalua SaaS product, web services, as well as critical or internet-facing web applications of the company
• Improve/optimize the configurations of application security tools (SAST, DAST, SCA) to reduce false positives/negatives
• Write and maintain internal automated scripts to fill gaps in scanning tools and industrialize manual security tests
• Act as the primary point of contact for the analysis, discussion, and review of technical audit results from EMEA customers
• Promote and support the implementation of security best practices within the development cycle in the R&D department, including security design reviews and security testing of major product changes or enhancements
• Support the analysis, reporting, tracking, and retesting of security vulnerabilities reported by various sources (customers, internal and external audits) and provide guidance to developers to fix them in accordance with Ivalua standards
• Contribute to the development, improvement, maintenance, and delivery of a security training program for developers and maintain secure development guidelines
• Act as an application security expert and stay informed about new vulnerabilities, threats, risks, tools, and techniques

YOUR PROFILE

If you have the experience and skills below, this role might be for you.

Skills and Experience:

• At least 5 years of hands-on experience in performing penetration tests on web applications and web services
• Proven experience in integrating security into the software development lifecycle (security by design, security code reviews, security testing, etc.)
• Proficiency in scripting, client-side programming, and query languages (such as Python, JavaScript, SQL)
• Experience with industry-recognized application security tools (BurpSuite, SQLMap, Invicti, Checkmarx, etc.)
• A qualification in offensive security or proof of starting preparation for such a certification (e.g., OSCP, OSWE, GPEN, GWAPT, CPTS, Hack-the-Box labs, or root-me challenges or similar) is preferred but not mandatory
• Ability to manage multiple tasks, prioritize, and meet deadlines

Desired Qualities:

• Excellent interpersonal, communication, and organizational skills
• Team spirit and ability to collaborate effectively with a wide range of stakeholders
• Sense of initiative, reliability, and ability to work independently with minimal supervision

WHAT HAPPENS NEXT

If your application matches the desired skills for this role, our recruitment team will contact you to schedule an initial phone call. Take a step closer to achieving your goals - apply today!

A dedicated recruiter will guide you through every step of the recruitment process. We are here to support you!

Our recruitment process is designed to assess your skills through a series of personalized interviews with our teams. Interviews will take place virtually and in person at our offices.

WHAT YOU WILL FIND AT IVALUA

• A “Hybrid” model (3 days on-site, 2 days remote),
• We are a team driven by the desire to push the boundaries of product and technological innovation,
• A constantly growing private company,
• A stable and profitable company,
• Every week, the opportunity to get together for a meal provided by the company,
• Thrive while pursuing your goals through a powerful team mindset, conducive to creativity and productivity,
• Reveal your professional potential through our training and career development program,
• Join a dynamic and international team composed of experts in their fields, and collaborate with people passionate about their work and guided by the same vision,
• Experience an inclusive work environment open to diversity, where your contribution will be appreciated and valued,
• Take part in the many events organized within the company (sports competitions, musical events, and team building),
• Highly rated by its employees, Ivalua has been named by the company Comparably ()

Driven by our differences - Your energy is our strength!

United by our values, we celebrate diversity and equity in all their breadth to build an inclusive work environment. To help our customers make their supply chains more efficient, sustainable, and resilient, we rely on our international teams with diverse and varied backgrounds, skills, and perspectives. We believe in equal opportunity and diversity as drivers of innovation, fostering a spirit of inclusivity, a productive and pleasant work environment, and offering fulfilling career prospects for all Ivaluans.

Explore the Ivalua culture - watch this video to learn more!

#LI-MV1 #LI-HYBRID