Information Security – Application Security Engineer (3959)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by NextPath Career Partners, so some details may not match this job. The employer's own page has the real description.

Overview

The Information Security – Application Security Engineer will play a crucial role in safeguarding the company's applications from security threats. This position encompasses a wide range of responsibilities including the implementation of security measures, conducting vulnerability assessments, and collaborating with development teams to ensure that security is integrated throughout the application development lifecycle. The chosen candidate will be pivotal in creating a secure framework that protects both company assets and customer information from potential breaches.

Job Responsibilities

• Develop and implement application security policies and procedures.
• Conduct security assessments and vulnerability testing on applications.
• Collaborate with development teams to integrate security best practices within the software development lifecycle.
• Provide recommendations for remediation of security issues found during assessments.
• Analyze and respond to security incidents related to applications.
• Stay current with emerging threats and vulnerabilities in the application security landscape.
• Perform code reviews and suggest improvements to enhance application security.
• Participate in security awareness training for development teams.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Minimum of 3 years of experience in application security or related field.
• Strong understanding of security protocols, cryptography, and application security vulnerabilities.
• Experience with security tools such as static analysis tools, dynamic analysis tools, and application firewalls.
• Knowledge of programming languages such as Java, C#, Python, or JavaScript.
• Familiarity with regulatory requirements and standards such as OWASP, PCI-DSS, and GDPR.
• Certifications such as CISSP, CEH, or CSSLP are preferred.

Technologies & Tools

The Information Security – Application Security Engineer will utilize various technologies and tools to effectively secure applications. Key technologies include but are not limited to, security testing tools such as SAST and DAST, web application firewalls, and various exploit frameworks. A solid understanding of cloud security platforms, as well as familiarity with CI/CD tools, is also essential in maintaining up-to-date security measures within the application development processes.

Ideal Candidates

The ideal candidates for the Information Security – Application Security Engineer position should possess a proactive mindset, demonstrating a strong commitment to security and an eye for detail. They should exhibit excellent problem-solving abilities and the capability to prioritize tasks effectively in a fast-paced environment. Strong interpersonal skills are essential for effective collaboration with cross-functional teams, and a continuous learning attitude will allow them to adapt to the ever-evolving landscape of cybersecurity threats. Ultimately, they will be driven by a passion for safeguarding information and enhancing application security protocols.