Application Security Engineer 100% REMOTE (SAST/SCA)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Optomi, so some details may not match this job. The employer's own page has the real description.

Overview

Optomi is seeking a highly skilled Application Security Engineer specializing in Static Application Security Testing (SAST) and Software Composition Analysis (SCA) to join our team in a fully remote capacity. This role requires a deep understanding of software development and security principles to analyze application security risks, enhance security processes, and collaborate effectively with development teams. The ideal candidate will contribute to the establishment of security best practices, as well as the assessment and mitigation of security vulnerabilities throughout the application lifecycle.

Job Responsibilities

• Conduct thorough security assessments of applications using SAST and SCA tools.
• Collaborate with software development teams to ensure security is integrated into the software development lifecycle.
• Identify, classify, and prioritize security vulnerabilities and provide actionable remediation recommendations.
• Develop and maintain security policies, standards, and methodologies related to application security.
• Create and deliver security training and awareness programs for development teams.
• Stay updated on the latest security threats and vulnerabilities impacting software applications.
• Participate in incident response and post-mortem activities as required.
• Engage in regular reporting and metrics gathering to monitor application security posture.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in application security, with a focus on SAST and SCA.
• Strong knowledge of application development processes, methodologies, and best practices.
• Familiarity with secure coding practices and various programming languages.
• Experience with security assessment tools and platforms.
• Certifications such as Certified Information Systems Security Professional (CISSP), Certified Secure Software Lifecycle Professional (CSSLP), or similar are preferred.
• Excellent analytical and problem-solving skills, with the ability to communicate effectively to both technical and non-technical audiences.

Technologies & Tools

The Application Security Engineer will work with a variety of technologies and tools, including but not limited to Static Application Security Testing (SAST) tools like Veracode and Fortify, Software Composition Analysis (SCA) tools such as Snyk and Black Duck, CI/CD pipelines, cloud platforms, and modern software development tools including Git, Jenkins, and Docker. Familiarity with programming languages such as Java, C#, JavaScript, and Python is also essential for effective security assessments.

Ideal Candidates

The ideal candidate for this Application Security Engineer role will be proactive, analytical, and possess a strong passion for cybersecurity. They are expected to have a keen eye for detail, allowing them to identify and mitigate security risks effectively. Candidates should exhibit significant teamwork and communication skills to advocate for best security practices within diverse teams. A strong desire for continuous learning in the evolving field of application security is essential, as is the ability to adapt to changing technology landscapes and security challenges.