Remote Work - Need Application Security Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Steneral Consulting, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Application Security Engineer at Steneral Consulting will play a crucial role in enhancing the security of applications by identifying vulnerabilities and ensuring compliance with security standards. This position requires a proactive mindset to collaborate with development teams, implement security measures throughout the application lifecycle, and conduct assessments and code reviews. The successful candidate will also participate in incident response activities and help foster a culture of security awareness within the organization.

Job Responsibilities

• Conduct security assessments and vulnerability scans of applications to identify potential risks.
• Collaborate with development teams to integrate security practices into the software development lifecycle (SDLC).
• Provide guidance and recommendations on application security best practices.
• Perform static and dynamic code analysis to identify security weaknesses in applications.
• Monitor application performance and respond to security incidents effectively.
• Develop and maintain security policies, procedures, and documentation.
• Stay updated with the latest security threats, vulnerabilities, and regulatory requirements.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 3 years of experience in application security or a related domain.
• Strong understanding of software development practices, secure coding techniques, and application architectures.
• Proficiency with security testing tools such as OWASP ZAP, Burp Suite, or similar.
• Knowledge of regulatory compliance standards such as PCI-DSS, GDPR, or HIPAA.
• Certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Offensive Security Certified Professional (OSCP) are a plus.

Technologies & Tools

The Application Security Engineer will utilize various technologies and tools, including but not limited to security scanning tools like OWASP ZAP and Burp Suite, secure coding frameworks, devSecOps automation tools, and threat modeling applications. Familiarity with programming languages such as Java, C#, Python, and JavaScript will also be beneficial in assessing and securing applications effectively.

Ideal Candidates

Ideal candidates for this position will have a strong analytical mindset and an attention to detail, which are essential for identifying vulnerabilities and implementing effective security solutions. They should be able to communicate complex security concepts clearly to non-technical stakeholders and work collaboratively within cross-functional teams. A passion for staying updated on emerging security trends and a demonstrated ability to adapt to fast-paced technological changes will further support success in this role.