Senior Application Security Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Dotdash Meredith, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Senior Application Security Engineer at Dotdash Meredith plays a pivotal role in safeguarding the organization's applications and systems. This individual will be responsible for identifying, assessing, and mitigating security risks within application development and deployment processes. By collaborating closely with development teams, security teams, and other stakeholders, the Senior Application Security Engineer will contribute to the establishment of a robust security posture while ensuring compliance with industry regulations and best practices.

Job Responsibilities

• Conduct comprehensive security assessments and code reviews for web and mobile applications.
• Develop and implement application security standards, guidelines, and best practices.
• Collaborate with development teams to integrate security throughout the software development lifecycle (SDLC).
• Monitor, investigate, and respond to application security incidents and vulnerabilities.
• Create and deliver security training and awareness programs for development teams.
• Research emerging threats and vulnerabilities and recommend appropriate security solutions.
• Participate in architecture and design reviews to ensure security considerations are addressed.
• Work with third-party vendors to assess and validate the security of external applications and services.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• A minimum of 5 years of experience in application security, software development, or a related discipline.
• Strong knowledge of common application security vulnerabilities (e.g., OWASP Top Ten).
• Familiarity with secure coding practices and frameworks.
• Experience with security tools such as static application security testing (SAST) and dynamic application security testing (DAST) tools.
• Proficiency in one or more programming languages (e.g., Java, JavaScript, Python, Ruby).
• Understanding of cloud security principles and practices.
• Relevant security certifications (e.g., CEH, CISSP, CSSLP) are highly desirable.

Technologies & Tools

The Senior Application Security Engineer will utilize a variety of technologies and tools including, but not limited to, static application security testing (SAST) tools like Fortify and Checkmarx, dynamic application security testing (DAST) tools like Burp Suite and OWASP ZAP, and application security frameworks such as DevSecOps practices. Familiarity with cloud platforms like AWS or Azure and their respective security tools will also be instrumental in ensuring comprehensive application security.

Ideal Candidates

Ideal candidates for the Senior Application Security Engineer position will possess strong analytical and problem-solving skills, demonstrating the ability to identify and mitigate risks systematically. They should be detail-oriented, with a proactive approach to security challenges and the ability to adapt to new technologies as they emerge. Additionally, excellent communication skills, both written and verbal, are essential for collaborating effectively with cross-functional teams and educating staff on security best practices. A passion for staying updated on the latest security trends and vulnerabilities is crucial for success in this role.