Sr Application Security Engineer

Essential Functions

• Engineer tooling for security initiatives

• Hands on experience with SAST, SCA, DAST

• Hands on experience and understanding of API Security, SaaS Security • Experience with Threat Modeling

• Manage penetration testing, and potential red team engagements

• Review developed source code for vulnerabilities

• Provide guidance to Software and Systems Engineers to secure systems and code

• Analyze, test, debug and discover security flaws or vulnerabilities in software, networks, systems, and applications

• Assess systems to identify and mitigate risk and vulnerabilities

• Test existing and new technologies for security vulnerabilities

• Review requested changes for equipment, technology and software which are planned for deployment

• Work closely with development, operations, information security, and network teams to craft and enforce security policies as it relates to DevOps, Infrastructure, and Software

• Responds to security incidents

• Work with IT and Development to develop secure solutions to reduce attack surfaces

• Analyze and harden existing infrastructure, automation, and deployment processes

• Ensure security best practices are implemented and followed

• Participate in the regular on-call rotation and handle identified incidents during their shift

Qualifications:

One or more of the following certifications is strongly preferred:

• CISSP

• CCSK

• CEH

• Vendor Certifications (e.g. AWS)

• GIAC/ GSEC

Requirements:

Total experience of 8+ years in Information Security with experience in the following:

• Application security testing and vulnerability review

• Secure software development

• SAST, SCA, DAST, API Security, SaaS Security

• Prior experience with Snyk is a strong plus

• Pipeline integrations

• Threat Modeling

• *nix

• Cloud security