Application Security Engineer - Remote

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Application Security Engineer at RemoteWorker US is responsible for safeguarding the integrity and confidentiality of software applications through proactive security measures and enhancements. This role involves collaborating with software development teams to embed security practices within the software development lifecycle, conducting security assessments, threat modeling, and vulnerability testing. The ideal candidate will leverage their knowledge of security best practices to mitigate risks and ensure compliance with industry standards and regulations, thereby contributing significantly to the organization’s overall security posture.

Job Responsibilities

• Conduct security assessments and code reviews to identify vulnerabilities within applications.
• Implement threat modeling and assess risk according to application architecture.
• Collaborate with development teams to integrate security best practices during the application development lifecycle.
• Design and implement security enhancements and features to existing and new applications.
• Coordinate penetration testing and vulnerability scanning to identify and remediate security risks.
• Monitor, document, and respond to security incidents or alerts related to applications.
• Provide security training and awareness to development teams to promote a culture of security.
• Stay updated on the latest security vulnerabilities, trends, and technologies affecting application security.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Minimum of 3 years of experience in application security, software development, or a related role.
• Proficiency in programming languages such as Java, C#, Python, or JavaScript.
• Strong understanding of security concepts such as OWASP Top Ten, secure coding practices, and common vulnerabilities.
• Experience with security tools such as static and dynamic application security testing (SAST/DAST) tools.
• Certifications such as CISSP, CEH, or CSSLP are preferred.
• Excellent problem-solving and analytical skills.
• Strong communication skills with the ability to articulate security risks to non-technical stakeholders.

Technologies & Tools

The Application Security Engineer will primarily utilize various security frameworks and tools, including but not limited to, static analysis tools (SAST), dynamic analysis tools (DAST), and integrated development environment (IDE) security plugins. Familiarity with software development tools such as Git, CI/CD pipelines, and containerization technologies (Docker, Kubernetes) is also essential. The role may involve working with cloud platforms and services to ensure application security in modern environments.

Ideal Candidates

Ideal candidates for the Application Security Engineer position will possess a proactive mindset with a strong commitment to improving application security practices. They are detail-oriented and demonstrate the ability to think critically about security vulnerabilities and their mitigations. Furthermore, successful individuals in this role will have a collaborative spirit, eager to work closely with engineering teams, and demonstrate excellent communication skills to convey complex security concepts effectively. A passion for continuous learning and staying current with the evolving security landscape is also essential.