Application Security Engineer - (Remote in the U.S.)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Dice, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Application Security Engineer will play a crucial role in ensuring the security and integrity of our software applications. This position requires a proactive approach to identifying vulnerabilities, conducting security assessments, and implementing security best practices throughout the software development lifecycle. The successful candidate will work closely with development teams to provide guidance and support on secure coding techniques and will oversee security initiatives to mitigate risks effectively. As a key member of our remote team, the engineer will possess strong analytical skills and a deep understanding of application security principles.

Job Responsibilities

• Perform security assessments of applications to identify vulnerabilities and risks.
• Collaborate with software development teams to implement security measures throughout the development lifecycle.
• Conduct code reviews and provide feedback to promote secure coding practices.
• Develop and maintain application security testing tools and scripts.
• Stay updated on the latest security threats, trends, and best practices to enhance organizational security posture.
• Create and deliver security training sessions for developers and staff.
• Work with compliance teams to ensure application security aligns with regulatory standards.
• Respond to and investigate security incidents related to application vulnerabilities.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in application security or related field.
• Proficiency in secure software development methodologies and practices.
• Strong knowledge of application vulnerability assessment tools (e.g., SAST, DAST, IAST).
• Familiarity with programming languages such as Java, C#, Python, or JavaScript.
• Experience with web application firewalls and intrusion detection systems.
• Valid certifications in security (e.g., CISSP, CEH, CSSLP) preferred.

Technologies & Tools

The Application Security Engineer will utilize a variety of technologies and tools to perform their duties effectively. This includes vulnerability assessment tools such as Veracode, Checkmarx, and OWASP ZAP, as well as secure coding and development tools like Git, Jenkins, and various CI/CD frameworks. The position will also leverage cloud security tools and platforms as applications move towards cloud environments.

Ideal Candidates

Ideal candidates for the Application Security Engineer position should possess excellent analytical and problem-solving abilities. They should be detail-oriented, able to work independently, and demonstrate strong communication skills to educate and collaborate with development teams. A commitment to continuous learning in the rapidly evolving field of cybersecurity is essential, along with a passion for promoting security awareness within the organization. Candidates should also exhibit a balanced approach to risk management, aligning security measures with business goals.