Staff Security Engineer (Security Automation)

Summary Job Description Responsibilities: The candidate will work with the Product Security team to build, maintain and run necessary automation for security and compliance. The candidate will have the following core responsibilities: Lead, design & develop automated workflows using APIs to tackle vulnerability management gaps Research and Implement security-focused tools to defend our infrastructure & applications from risks. Adopt open source, enterprise security scanners to define & automate security development lifecycle processes at scale. Develop custom scripts to increase system efficiency and lower the human intervention time on any tasks. Ensure that security requirements and considerations are woven by automation into the development of each system Work closely with stakeholders to define and enforce security policies and access controls Improve security team efficiency through process automation Work in an agile team, pair programming, and support deliverables Collect & report metrics on automation effectiveness Collaborate with peers to integrate secure DevOps principles into CI/CD pipelines and automated builds Be a part of on-call PagerDuty rotations Drive continuous process feedback improvement Skills And Experience Baseline: 10+ years of relevant experience Demonstrate coding skills in Python, Java Script, Node.js, React. Extensive experience with AWS cloud environment, using its APIs, Serverless Application Model (AWS SAM) and Lambda functions Experience working with CI/CD (e.g., TeamCity, Jenkins) pipelines and associated tools. Working knowledge of react, Kubernetes, Docker Containers Experience in general security concepts, OWASP secure coding practices and standards (MITRE ATT&CK, Cyber Kill Chain, cybersecurity detection and response lifecycle) Bachelor's degree or higher in Computer Science or a related field Understanding of Rest APIs and ability to utilize them in the code Experienced in design patterns and best coding practices. Excellent written and verbal communication skills, and experience working with remote teams Have an agile, systematic problem-solving approach, coupled with strong interpersonal skills and a sense of ownership and drive. Unimpeachable integrity, character, courage and honesty About Guidewire Guidewire is the platform P&C insurers trust to engage, innovate, and grow efficiently. We combine digital, core, analytics, and AI to deliver our platform as a cloud service. More than 540+ insurers in 40 countries, from new ventures to the largest and most complex in the world, run on Guidewire. As a partner to our customers, we continually evolve to enable their success. We are proud of our unparalleled implementation track record with 1600+ successful projects, supported by the largest R&D team and partner ecosystem in the industry. Our Marketplace provides hundreds of applications that accelerate integration, localization, and innovation. For more information, please visit www.guidewire.com and follow us on Twitter: @Guidewire_PandC. Guidewire Software, Inc. is proud to be an equal opportunity and affirmative action employer. We are committed to an inclusive workplace, and believe that a diversity of perspectives, abilities, and cultures is a key to our success. Qualified applicants will receive consideration without regard to race, color, ancestry, religion, sex, national origin, citizenship, marital status, age, sexual orientation, gender identity, gender expression, veteran status, or disability. All offers are contingent upon passing a criminal history and other background checks where it's applicable to the position. We’re an extraordinary blend of hungry self-starters, intrepid explorers, brainy experts, and loyal allies. Combine all of this, and we make a glorious success story, loaded with down-to-earth, helpful, and passionate people, all on the journey of cloud innovation and best in class technology. Guidewire’s an adventure—and it’s yours for the taking. At Guidewire, we are utterly committed to customer success. We combine digital, core, analytics, and AI to deliver our platform as a cloud service to the P&C Insurance industry. And with the largest R&D team, services team, and partner ecosystem in the industry, we continually evolve and innovate to meet our customers’ needs. We put our values of Integrity, Rationality, and Collegiality first, harboring a culture of honesty and openness that our people never want to lose. And we each bring a little quirkiness—and a little genius—to the table. As the landscape of our industry continues to shift, we respond with flexibility and skill. We’re braving uncharted territory, pushing past the conventional with our products, partners, and people.