Security Engineer

Freshworks makes it fast and easy for businesses to delight their customers and employees. We do this by taking a fresh approach to building and delivering software that is affordable, quick to implement, and designed for the end user. Headquartered in  San Mateo, California , Freshworks has a global team operating from 13 global locations  to serve more than 65,000 companies -- from startups to public companies – that rely on Freshworks software-as-a-service to enable a better customer experience (CRM, CX) and employee experience (ITSM).

Freshworks’ cloud-based software suite includes  Freshdesk  (omni-channel customer support),  Freshsales  (sales automation),  Freshmarketer  (marketing automation),  Freshservice  (IT service desk),  Freshchat  (AI-powered bots), supported by Neo, our underlying platform of shared services.

Freshworks is featured in global national press including CNBC, Forbes, Fortune, Bloomberg and has been a BuiltIn Best Place to work in San Francisco and Denver for the last 3 years. Our customer ratings have earned Freshworks products TrustRadius Top Rated Software ratings and G2 Best of Awards for Best Feature Set, Best Value for the Price and Best Relationship.

Job Description

Purpose of the Role

In today’s world any organization or individual are constantly under the threat of cyber attack and this is proven through a steady uprise in the security incidents and data breaches year on year. We at Freshworks are committed to prevent such incidents and provide a secure environment for our customers to run their business.

Freshworks is looking for a passionate and self-driven application security engineer with the ability to work independently and collaboratively to enable development teams build secure products. You will play a pivotal role in integrating and advancing security by working with Developers, Product Owners, Program Managers, and Security Engineers. As part of the security engineering team you will advocate secure coding, secure design principles, build frameworks to automate security testing and conduct security assessments to unearth critical vulnerabilities. We also expect you to deliver trainings to development and QA teams.

Responsibilities

Security Assessments:

• Examine the products in detail to discover vulnerabilities and collaborate with the other security engineers to practically demonstrate the exploitability and risk factors.
• Be on the forefront of emerging vulnerabilities / threats which could affect Freshworks products through independent research and study. Engage with the developers in developing workarounds / mitigation plan and ensure they are implemented per policy.

Threat Modelling:

• Engage with the development teams to conduct secure design reviews / threat modelling exercise to enumerates threats and mitigation strategy.
• Enable the developers with knowledge of threat modelling by conducting focused workshops.

Secure Coding:

• Priorities critical defects and ensure these are identified and mitigated during the sprint.
• Integration and automation of SAST in the DevOps pipeline.
• Build secure coding principles and propagate across the development community.
• Be the to-go person for developers in solving critical issues relating to secure product development.

Training:

• Build and enhance secure coding / security assessments training contents for developers and QA team.
• Deliver training programs at various levels in the organizations.
• Conduct workshops / security tech-talks to disseminate security knowledge and awareness.

Qualifications

• Master or Bachelor of Engineering in Computer Science / Engineering, Masters in Computer Science, Bachelor of Science in Computer Science.
• 1 to 4 years of experience in application security. 
• Good knowledge in multiple classes of vulnerabilities that includes cross-site scripting, SQL Injection, CSRF, cryptographic related weakness, and code injection.
• Good knowledge in any programming / scripting languages such as Java, Ruby, and Python.
• Good knowledge relating to services / technology relating to cloud.
• Ability to automate security testing and improve productivity in security assessments.
• Ability to communicate and interpret security vulnerabilities to various audience such as development and management teams.

Additional Information

At Freshworks, we are creating a global workplace that enables everyone to find their true potential, purpose, and passion irrespective of their background, gender, race, sexual orientation, religion and ethnicity. We are committed to providing equal opportunity for all and believe that diversity in the workplace creates a more vibrant, richer work environment that advances the goals of our employees, communities and the business.