Application Security Engineer (Devops Support)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Diamondpick, so some details may not match this job. The employer's own page has the real description.

Overview

The Application Security Engineer (DevOps Support) at Diamondpick plays a crucial role in safeguarding the security of web applications and ensuring the integrity of development processes. The candidate will collaborate with cross-functional teams to integrate security best practices into the DevOps lifecycle, conduct vulnerability assessments, implement security controls, and promote a culture of security awareness within engineering teams. This position requires a blend of technical acumen and collaborative skills to manage security risks effectively while supporting the rapid deployment of applications.

Job Responsibilities

• Identify and analyze security risks in applications throughout the development lifecycle.
• Integrate security testing tools within the CI/CD pipelines to automate vulnerability detection.
• Collaborate with development teams to define security requirements and ensure compliance with industry standards.
• Conduct code reviews and secure application architecture assessments.
• Provide guidance on secure coding practices and remediate identified vulnerabilities.
• Establish monitoring and incident response procedures for application security incidents.
• Stay abreast of emerging security threats and advise on appropriate countermeasures.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in application security, DevOps, or software development.
• Strong knowledge of security frameworks such as OWASP, NIST, or CIS.
• Experience with security testing tools (e.g., SAST, DAST, IAST).
• Proficiency in programming languages such as Python, Java, or JavaScript.
• Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and container security.
• Excellent problem-solving skills and the ability to work in a fast-paced environment.

Technologies & Tools

The Application Security Engineer will utilize a range of technologies and tools, including but not limited to security scanning tools such as Snyk, Veracode, and Burp Suite, version control systems like Git, CI/CD platforms such as Jenkins or GitLab, cloud security solutions, and infrastructure as code tools like Terraform and Ansible. Familiarity with application monitoring tools and security incident response frameworks will also be beneficial in executing daily responsibilities effectively.

Ideal Candidates

Ideal candidates for the Application Security Engineer position should possess a proactive mindset with a strong commitment to security. They should excel in communication, expressing complex security concepts in clear terms to non-technical team members. A collaborative approach, coupled with an analytical mindset and attention to detail, is vital. Candidates should also demonstrate a continuous desire to learn and adapt to new security challenges in the rapidly evolving tech landscape.