Application Security Engineer - Code Scanning (VIT) // Remote

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Technogen, Inc., so some details may not match this job. The employer's own page has the real description.

Job Overview

The Application Security Engineer - Code Scanning at Technogen, Inc. is responsible for ensuring the security of applications through rigorous code scanning processes. This position entails evaluating application code for vulnerabilities, implementing security best practices, and collaborating with development teams to remediate identified issues. The individual will also focus on enhancing the security posture of the organization by integrating automated security tools and conducting training sessions for development staff on secure coding practices.

Job Responsibilities

• Conduct security assessments of application code using automated scanning tools and manual techniques.
• Identify, evaluate, and prioritize security vulnerabilities in source code and applications.
• Collaborate with development teams to guide and support them in remediating security vulnerabilities.
• Develop and maintain secure coding guidelines and documentation.
• Create training materials and facilitate secure coding best practices workshops for developers.
• Monitor evolving security threats and industry trends to continually improve the security framework.
• Assist in establishing and enforcing application security processes and standards across the organization.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience.
• A minimum of 3 years’ experience in application security, including code scanning and static analysis.
• Proficiency with security assessment tools such as SAST, DAST, and IAST.
• Strong understanding of secure coding principles and application development frameworks.
• Experience with programming languages such as Java, C#, Python, or JavaScript.
• Knowledge of OWASP top ten vulnerabilities and strategies to mitigate them.
• Excellent analytical, problem-solving, and communication skills.

Technologies & Tools

This position utilizes a variety of technologies and tools critical to application security, including but not limited to static application security testing (SAST) tools such as Checkmarx and Fortify, dynamic application security testing (DAST) tools like Burp Suite, and integrated development environments (IDEs). Familiarity with version control systems, CI/CD pipelines, and cloud security platforms will also be beneficial in this role.

Ideal Candidates

The ideal candidate for the Application Security Engineer - Code Scanning position is an individual who possesses a strong commitment to security and innovation. They should exhibit a curious mindset, eager to investigate potential vulnerabilities continuously. Excellent teamwork and communication skills are essential, as the role requires collaboration across different teams. Candidates should be adaptable, able to thrive in a fast-paced environment, and demonstrate a proactive approach to problem-solving, ensuring security is woven into the application development lifecycle.