Info Sec Engineer

About Cimpress

Led by founder and CEO Robert Keane, Cimpress invests in and helps build customer-focused, entrepreneurial mass customization businesses. Through the personalized physical (and digital) products these companies create,we empower over 17 million global customers to make an impression. Last year, Cimpress generated $3.5B in revenue through customized print products, signage, apparel, packaging and more. The Cimpress family includes a dynamic, international group of businesses and central teams, all working to solve problems, build businesses, innovate and improve.

WIRmachenDRUCK, a German web-to-print company, offers graphic designers and print resellers a vast range of highly customizable products at low prices; from promotional products to customized beverage cans. Our dynamic and fast-growing team thrives on curiosity, innovation, and customer-centric thinking. If you're looking to join a collaborative and empowered environment that puts people first, you’ve just found your next career home.

About The Role

• In the InfoSec team, as an Application Security Engineer, you will provide the architectural expertise to ensure robust and resilient software. You will also have a critical role in ensuring we are providing the proper training, development frameworks, enabling our developers the
• Freedom to experiment and take informed decisions when trying new things. We’re seeking someone passionate about software development and looking for opportunities to improve it.
  
  

Key Responsibilities

• Excellent verbal and written communication skills for presenting solutions and sharing knowledge.
• 2 - 4 years of experience as a software engineer with hands-on experience in penetration testing of enterprise level software products.
  
  

Application Security & Penetration Testing Experience

• Perform penetration tests on web applications, network devices, cloud infrastructures, web-services (REST and Swagger).
• Design and conduct simulated social engineering attacks
• Research and experiment with different types of attacks
• Develop & automate methodologies for penetration testing
• Automate common testing techniques to improve efficiency
• Write reports on penetration tests; help fix and verify vulnerabilities.
• Analyze external vulnerability reports & pen-testing reports, security scans, and penetration tests, coordinate fixes.
• Participate in security design discussions.
• Stay updated on vulnerabilities, attack methods, and security trends.
• Troubleshoot, debug, and upgrade existing gaps in security features of the applications.
• Identify and fix security vulnerabilities in code.
  
  

Security Practices And Implementation Experience

• Analyze bug reports, security scans, and penetration tests & coordinate fixes.
• Monitor, assess and respond to security incidents.
• Conduct workshops and training on penetration testing for microservices, database & web app.
  
  

Technical Skills And Knowledge

• Experience with the AWS, LAMP stack (Linux, Apache, MySQL, PHP), Node.js (MERN stack/MEAN stack), Docker, Kubernetes, Bitbucket CI, etc.
• Security testing tools such as Burp Suite, Nessus, SQLmap, Arachni, OWASP ZAP, MSF, Offensive Security distributions, Nmap, others.
• Programming languages, especially for scripting (PHP, MySQL, BASH, Nodejs, HTML)
• Certifications such as CEH, CISSP, OSCP, CPENT, others.
  
  

Good-to-Have Skills

• Broad awareness of security engineering concepts and practices across all phases of the software development lifecycle
• Knowledge of all kinds of security related protocols and standards (TLS, OAUTH)
• Knowledge of risk and security frameworks and standards (ISO 27001, NIST CSF, FAIR)
• Familiarity with the tools for various security activities: SCA, SAST/DAST as well as best-practice documents like OWASP Top 20
  
  

Why You'll Love Working Here

Being at Cimpress means that you don’t see work as just a building, a desk or a manufacturing floor. You see it as a chance to take a step forward in your career journey – and your life. We strive to give you everything you need to learn, grow, and succeed. Through innovation, collaboration, and perpetual exposure to what’s next, we’re always pushing boundaries and broadening our horizons. We embrace the chance to operate outside of our comfort zone to discover what we’re capable of. Some might call that a challenge; we just call it another great day at work.

Equal Opportunity Employer

Cimpress, is an Equal Employment Opportunity Employer. All qualified candidates will receive consideration for employment without regard to race, color, sex, national or ethnic origin, nationality, age, religion, citizenship, disability, medical condition, sexual orientation, gender identity, gender presentation, legal or preferred name, marital status, pregnancy, family structure, veteran status or any other basis protected by human rights laws or regulations. This list is not exhaustive and, in fact, in many cases, we strive to do more than the law requires.

We're Remote-First

In 2020, Cimpress adopted a Remote-First operating model and culture. We heard from our team members that having the freedom, autonomy and trust in each other to work from home and, the ability to operate when they are most productive, empowers them to be their best. Vista also provides collaboration spaces for team members to work physically together when it's safe to do so and when in-person collaboration will deliver the best results. Currently we are enabled to hire remote team members in over 30 US States as well as several countries in Europe, including Spain, Germany, UK, Czech Republic, the Netherlands and Switzerland.