Application Security Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by The IT Gigs, so some details may not match this job. The employer's own page has the real description.

Overview

The Application Security Engineer at The IT Gigs will play a critical role in safeguarding our software applications and services from security vulnerabilities and threats. This position requires a thorough understanding of secure coding practices, threat modeling, and various application security frameworks. The engineer will be responsible for conducting security assessments, collaborating with development teams, and implementing security controls throughout the application lifecycle to ensure the integrity and confidentiality of our data and infrastructure.

Job Responsibilities

• Conduct security assessments, including code reviews, penetration testing, and risk assessments to identify vulnerabilities in applications.
• Collaborate with development teams to integrate security best practices in the software development lifecycle (SDLC).
• Develop and maintain application security guidelines, standards, and procedures.
• Perform threat modeling and risk analysis to evaluate potential security risks associated with application designs.
• Stay current with emerging security vulnerabilities and recommend appropriate remediation strategies.
• Provide training and support to developers on secure coding practices and security-related tools.
• Create and maintain documentation related to security testing, policies, and reports.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 3+ years of experience in application security or related fields, with a strong focus on secure software development.
• Proven experience with security assessment tools (e.g., OWASP ZAP, Burp Suite, Fortify).
• Solid understanding of web applications, mobile applications, and APIs.
• Knowledge of secure coding practices and familiarity with security compliance frameworks (e.g., OWASP, NIST, ISO 27001).
• Certifications such as Certified Application Security Engineer (CASE), Certified Ethical Hacker (CEH), or other relevant certifications are a plus.
• Excellent analytical and problem-solving skills, with a detail-oriented mindset.

Technologies & Tools

The Application Security Engineer will engage with various technologies and tools including, but not limited to, Static Application Security Testing (SAST) tools, Dynamic Application Security Testing (DAST) tools, source code analysis tools, and security information and event management (SIEM) systems. Familiarity with programming languages such as Java, Python, and JavaScript, as well as frameworks and libraries relevant to application development, is also essential for success in this position.

Ideal Candidates

Ideal candidates for the Application Security Engineer role are proactive professionals who possess a deep understanding of security principles and a passion for fostering a secure software development environment. They exhibit strong communication skills to effectively collaborate with cross-functional teams and are passionate about educating others on security practices. The best fit will also demonstrate a commitment to continuous learning and staying abreast of the latest security trends and threats within the application landscape.