Application Security Engineer, Senior - Remote | WFH

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Get It Recruit - Information Technology, so some details may not match this job. The employer's own page has the real description.

Overview

The Senior Application Security Engineer at Get It Recruit will be responsible for safeguarding and enhancing the security of our applications by implementing comprehensive security measures throughout the development lifecycle. This role requires a thorough understanding of application vulnerabilities and the ability to collaborate with development teams to advocate for security best practices, ensuring that our software products are secure by design. The ideal candidate will possess a blend of technical expertise, analytical skills, and a proactive approach to problem-solving, all while working in a remote team environment.

Job Responsibilities

• Conduct security assessments of applications and software to identify vulnerabilities and recommend appropriate remediation strategies.
• Collaborate with cross-functional teams to integrate security practices into the software development lifecycle (SDLC).
• Perform threat modeling and risk assessments for new and existing applications.
• Develop, implement, and maintain secure coding standards and best practices.
• Provide training and awareness programs for development teams regarding application security risks and mitigation techniques.
• Stay current with industry trends, emerging threats, and security technologies to enhance the organization's security posture.
• Assist in the response to security incidents involving applications and contribute to remediation efforts.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field; Master’s degree preferred.
• Minimum of 5 years of experience in application security or a related field.
• Strong understanding of web application security vulnerabilities (e.g., OWASP Top Ten, SANS Top 25).
• Proficiency in secure coding practices and knowledge of programming languages such as Java, C#, Python, or JavaScript.
• Experience with security testing tools (e.g., dynamic, static, and interactive application security testing)
• Relevant security certifications (e.g., CISSP, CEH, CSSLP, or equivalent) are highly desirable.
• Excellent analytical and problem-solving skills with attention to detail.
• Proficient in communication and collaboration with technical and non-technical stakeholders.

Technologies & Tools

The Senior Application Security Engineer will utilize a variety of technologies and tools to enhance application security, including but not limited to static analysis security testing (SAST) tools, dynamic analysis security testing (DAST) tools, software composition analysis (SCA) tools, and threat modeling platforms. Familiarity with cloud environments, such as AWS or Azure, as well as container security practices using Docker and Kubernetes, will also be essential in this role.

Ideal Candidates

Ideal candidates for this position possess a strong, analytical mindset with the ability to think critically about security implications during the development process. They are proactive, detail-oriented individuals who can work independently as well as collaborate effectively in a remote and diverse team environment. Excellent communication skills are vital, enabling them to convey complex security concepts to stakeholders at all levels of the organization. Furthermore, the ability to manage multiple projects and deadlines will contribute to their success in this dynamic role.