Application Vulnerability Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Jobs via eFinancialCareers, so some details may not match this job. The employer's own page has the real description.

Overview

The Application Vulnerability Engineer will play a crucial role in enhancing the security posture of our applications by identifying, analyzing, and mitigating vulnerabilities. This position involves collaborating with development teams to embed security practices into the software development lifecycle. The ideal candidate will conduct application security assessments, provide remediation recommendations, and ensure compliance with security standards. By proactively addressing security risks, the Application Vulnerability Engineer will contribute to safeguarding sensitive data and maintaining the trust of our clients.

Job Responsibilities

• Conduct comprehensive application security assessments and vulnerability scanning.
• Identify, analyze, and prioritize security vulnerabilities in applications and APIs.
• Collaborate with development teams to address and remediate identified vulnerabilities.
• Create and maintain documentation of security assessments and remediation actions.
• Stay up to date with the latest application security trends and technologies.
• Develop and implement security testing methodologies and best practices.
• Provide training and support to development and operations teams on secure coding practices.
• Participate in incident response planning and execution related to application vulnerabilities.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3+ years of experience in application security or a related field.
• Proficiency in security testing tools such as static and dynamic application security testing (SAST/DAST).
• Strong understanding of common application vulnerabilities (e.g., OWASP Top Ten).
• Experience with secure coding practices and methodologies.
• Knowledge of software development life cycle (SDLC) and Agile methodologies.
• Familiarity with programming languages such as Java, Python, or JavaScript is preferable.
• Relevant security certifications (e.g., CISSP, CEH, OSCP) are a plus.

Technologies & Tools

The Application Vulnerability Engineer will utilize a variety of technologies and tools, including but not limited to, vulnerability scanning software (such as Fortify, Veracode, or Nessus), static and dynamic analysis tools, web application firewalls (WAFs), and Secure Software Development Lifecycle (SSDLC) methodologies. A strong command of programming languages and familiarity with DevOps tools will also be essential in this role.

Ideal Candidates

The ideal candidate for the Application Vulnerability Engineer position will possess a strong analytical mindset, with exceptional problem-solving abilities and attention to detail. They should demonstrate a passion for cybersecurity and a commitment to continuous learning and improvement. Effective communication skills are essential, as the candidate will be working closely with cross-functional teams to promote security awareness and implement best practices. A proactive approach to identifying risks and proposing solutions will further enhance their effectiveness in this role.