Information Security – Application Security Engineer (3959)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by NextPath Career Partners, so some details may not match this job. The employer's own page has the real description.

Position Overview

The Information Security – Application Security Engineer at NextPath Career Partners will be responsible for enhancing the security posture of our software applications by ensuring the implementation of secure coding practices, performing security assessments and testing, and driving the security development lifecycle. This role requires a proactive approach in identifying vulnerabilities and mitigating risks, collaborating closely with development teams to support secure application development while adhering to industry standards and best practices.

Job Responsibilities

• Conduct security assessments, code reviews, and threat modeling on applications to identify and remediate vulnerabilities.
• Implement and promote secure coding practices across development teams.
• Design and develop security testing strategies, including static and dynamic analysis tools.
• Collaborate with software development teams to integrate security within the software development lifecycle (SDLC).
• Stay current with emerging threats and vulnerabilities and evaluate their impact on the organization.
• Develop documentation for security policies, procedures, and standards.
• Participate in incident response activities related to application security breaches.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in application security or related IT security roles.
• Strong knowledge of secure coding practices and application security frameworks (such as OWASP).
• Experience with security assessment tools and techniques (e.g., SAST, DAST, IAST).
• Familiarity with programming languages such as Java, C#, or Python.
• Relevant security certifications (e.g., CISSP, CEH, CSSLP) are a plus.
• Excellent problem-solving skills and attention to detail.

Technologies & Tools

The Information Security – Application Security Engineer will utilize various technologies and tools to perform their duties effectively. This includes web application firewalls (WAFs), vulnerability assessment tools, static and dynamic analysis tools, security information and event management (SIEM) solutions, along with programming and scripting languages to automate security processes. Familiarity with CI/CD tools and application performance monitoring software is also beneficial to ensure comprehensive security integration throughout the development lifecycle.

Ideal Candidates

The ideal candidate for the Information Security – Application Security Engineer position possesses a strong analytical mindset and a deep understanding of application security principles. They should demonstrate exceptional communication skills, allowing them to effectively collaborate with cross-functional teams and articulate security risks to non-technical stakeholders. Furthermore, a commitment to continuous learning and a passion for staying abreast of the latest security trends and technologies will differentiate them in this critical role.