Security Engineer

Acceldata is building a security function that connects proactive validation with real-world incident readiness. This Security Engineer role owns end-to-end security for the Acceldata platform, with hands-on work across SOC operations and penetration testing, including vulnerability discovery, remediation, and security automation.

Based in Campbell, CA, this onsite position supports continuous protection through CVE management, assessments, and design review, while partnering with engineering and cross-functional teams to help deliver secure software.

What you’ll do

• Work with a security team covering both proactive testing and reactive response, applying knowledge of SOC (Security Operations Centre) operations, real-time threat monitoring, and how these efforts reinforce each other.
• Run periodic penetration tests and white-box assessments to confirm security requirements are met, including testing before a product ramps where possible.
• Own end-to-end CVE management, including triage and impact analysis across confidentiality, integrity, and availability.
• Ensure open-source dependency vulnerabilities are remediated and that monthly and quarterly patch releases include the latest security fixes.
• Collaborate with cross-functional teams to integrate security and risk questionnaire evaluations into the sales/vendor review lifecycle.
• Coordinate third-party application security assessments for Acceldata products.
• Make sure security bugs are filed, fixed, and the results are actioned.
• Perform threat modeling and design reviews for products and features.
• Build security automation for continuous validation, including SAST and DAST.
• Act as first responder for customer-facing security questions related to CVE inquiries, bug triage, and incident management.
• Partner with Product, Engineering, and other internal and external teams to deliver secure software.

What you bring

• Hands-on, production experience in penetration testing, white-box testing, application security, and vulnerability management.
• Strong command of the OWASP Top 10, including experience finding these issues in real applications.
• Experience fixing security issues in Java code and experience with API security testing.
• Hands-on experience with AppScan, Fortify, and Checkmarx for SAST/DAST.
• Experience delivering secure code training to developers and participating in bug bounty programs.
• Strong communication skills and a collaborative approach with engineering teams.

Security tools and technologies

• SOC (Security Operations Centre), CVE management, OWASP Top 10
• Java, API security testing
• AppScan, Fortify, Checkmarx
• SAST, DAST, third-party application security assessments

AI tools used in the hiring process

Acceldata may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist the recruitment team but do not replace human judgment, and final hiring decisions are made by humans. If you would like more information about how your data is processed, please contact us.