Senior Application Security Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Entrata, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Senior Application Security Engineer at Entrata will play a pivotal role in enhancing the security posture of our applications and cloud-based solutions. This individual will be responsible for identifying vulnerabilities within our software architecture, spearheading security assessments, and implementing robust security measures. The ideal candidate will collaborate closely with development teams to instill secure coding practices and conduct hands-on training to cultivate a security-first mindset throughout the development lifecycle.

Job Responsibilities

• Conduct security assessments and risk analysis for applications and APIs.
• Implement security best practices and policies across the software development lifecycle.
• Collaborate with cross-functional teams to enhance application designs and threat models.
• Identify and remediate vulnerabilities in code through static and dynamic analysis.
• Lead security awareness training and workshops for developers and stakeholders.
• Monitor security incidents and provide response strategies to mitigate risks.
• Research and stay current with emerging security trends and technologies.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Five or more years of experience in application security, software development, or a similar role.
• Strong understanding of application security principles, secure coding practices, and threat modeling.
• Proficiency in programming languages such as Java, Python, or JavaScript.
• Experience with security tools such as SAST, DAST, and IAST solutions.
• Strong analytical and problem-solving skills with attention to detail.
• Certification in information security (e.g., CISSP, CEH, or similar) is a plus.

Technologies & Tools

The Senior Application Security Engineer will engage with a variety of technologies and tools to effectively assess and enhance the security of applications. This includes, but is not limited to, security testing tools such as Fortify and Veracode, cloud services like AWS and Azure, and programming languages such as Java, JavaScript, and Python. Familiarity with CI/CD tools, containerization technologies like Docker, and frameworks like OWASP will also be essential for success in this role.

Ideal Candidates

The ideal candidate for the Senior Application Security Engineer position is a proactive and detail-oriented professional with a strong sense of accountability. They possess excellent communication skills to convey security concepts effectively to non-technical stakeholders and are capable of working collaboratively in fast-paced, dynamic environments. A commitment to continuous learning and improvement, coupled with a passion for fostering a culture of security awareness, further distinguishes them as a suitable fit for our team at Entrata.