Application Security Engineer - Senior

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Coveros, so some details may not match this job. The employer's own page has the real description.

Overview

The Senior Application Security Engineer at Coveros plays a critical role in ensuring the security of applications throughout the software development lifecycle. This position involves the assessment, validation, and enhancement of security measures, while collaborating with cross-functional teams to implement effective security practices. The ideal candidate will provide expert guidance on security standards, proactively identify vulnerabilities, and drive the adoption of secure coding techniques, thereby safeguarding organizational assets and data integrity.

Job Responsibilities

• Conduct comprehensive security assessments of applications and systems to identify vulnerabilities and risks.
• Collaborate with development teams to integrate security practices into the software development lifecycle (SDLC).
• Develop and implement security testing protocols, including penetration testing and application security reviews.
• Provide expert advice on secure coding standards and best practices to development teams.
• Monitor, analyze, and respond to security incidents and threats.
• Maintain up-to-date knowledge of industry trends, threats, and technologies affecting application security.
• Work with stakeholders to develop and implement security policies and procedures.
• Assist in the development of security awareness training programs for staff.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 5+ years of experience in application security or a related field.
• Strong knowledge of security standards such as OWASP, NIST, and ISO 27001.
• Proficiency in a variety of programming languages, including but not limited to Java, C#, Python, and JavaScript.
• Experience with security tools such as static and dynamic analysis tools (SAST/DAST), IAST, and vulnerability scanners.
• Understanding of common web vulnerabilities (e.g., SQL injection, XSS, etc.) and mitigation techniques.
• Certifications in information security (e.g., CISSP, CEH, CSSLP) are a plus.

Technologies & Tools

The Senior Application Security Engineer will utilize a variety of tools and technologies to enhance application security. This includes static and dynamic analysis tools, application security testing tools, security information and event management (SIEM) systems, and vulnerability management software. Familiarity with cloud security practices and tools, as well as container security technologies, will also be beneficial in ensuring the security of applications in modern development environments.

Ideal Candidates

The ideal candidate for the Senior Application Security Engineer position is a proactive thinker with a strong analytical mindset and problem-solving skills. They possess excellent communication abilities, enabling them to effectively convey security concepts to both technical and non-technical stakeholders. A collaborative nature and the capacity to work under pressure, alongside a deep passion for security and continuous learning in the evolving tech landscape, are essential traits that will contribute to their success in this role.