Applications Security Engineer - DevSecOps/Cyber Security - REMOTE

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker US, so some details may not match this job. The employer's own page has the real description.

Overview

The Applications Security Engineer - DevSecOps/Cyber Security position at RemoteWorker US involves ensuring the security of applications throughout the software development lifecycle. This role will focus on integrating security practices within the DevSecOps framework, promoting secure coding practices, conducting vulnerability assessments, and collaborating with cross-functional teams to enhance the overall security posture of the applications. The successful candidate will play a crucial role in protecting sensitive data and mitigating potential risks associated with software development and deployment processes.

Job Responsibilities

• Integrate security practices into the DevOps pipeline to improve the existing development process.
• Conduct security assessments and vulnerability scans on application code and infrastructure.
• Implement secure coding standards and provide training to development teams on best practices.
• Collaborate with software engineers, product managers, and IT teams to ensure secure application designs.
• Monitor security threats and recommend necessary security tools and enhancements.
• Respond to security incidents and conduct root cause analysis to prevent future occurrences.
• Stay up-to-date with industry trends and emerging threats to adjust strategies accordingly.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or related field.
• Minimum of 3 years of experience in application security, software development, or DevSecOps roles.
• Strong knowledge of secure coding practices across multiple programming languages (e.g., Java, Python, JavaScript).
• Familiarity with security tools such as static and dynamic analysis tools, and vulnerability management platforms.
• Understanding of cloud security principles and relevant services (e.g., AWS, Azure).
• Certifications such as CISSP, CSSLP, or CEH are considered advantageous.
• Strong analytical and problem-solving skills with attention to detail.

Technologies & Tools

The position requires proficiency in a variety of technological environments and tools to ensure secure application development. Candidates are expected to have experience with security assessment tools such as SAST, DAST, and IAST, as well as familiarity with CI/CD platforms (e.g., Jenkins, GitLab CI). Knowledge of cloud platforms like AWS or Azure, along with security frameworks such as OWASP, will be vital for the role. Furthermore, familiarity with container security tools (e.g., Docker, Kubernetes) will be beneficial to effectively monitor and safeguard containerized applications.

Ideal Candidates

The ideal candidate for the Applications Security Engineer role will possess a proactive mindset with a strong commitment to cybersecurity principles. They should exhibit exceptional communication skills, enabling effective collaboration across technical and non-technical teams. A passion for continuous learning and staying current with the latest security trends is essential. Furthermore, candidates should demonstrate adaptability in a fast-paced environment and a keen ability to identify potential vulnerabilities and threats in application architectures.