Senior Application Security Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Nollou Technology, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Senior Application Security Engineer at Nollou Technology will play a crucial role in ensuring the security and integrity of our software applications. This position involves collaborating with development teams to integrate security practices into the software development life cycle, conducting threat modeling, vulnerability assessments, and code reviews, and providing guidance on secure coding practices. The Senior Application Security Engineer will also engage in incident response, foster security awareness across the organization, and continuously improve security protocols to preempt potential threats.

Job Responsibilities

• Design and implement application security programs and frameworks.
• Conduct regular security assessments including penetration testing and vulnerability scans.
• Collaborate with software development teams to review software design and architecture for security risks.
• Lead threat modeling sessions and risk assessments for new applications and updates.
• Provide technical support and guidance to developers on secure coding practices.
• Monitor and analyze application logs for security incidents and respond promptly.
• Develop and deliver security training and awareness programs for technical and non-technical staff.
• Stay current with emerging security threats and trends to proactively address vulnerabilities.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 5 years of experience in application security or related field.
• Strong understanding of secure coding practices and application security principles.
• Experience with vulnerability assessment tools such as OWASP ZAP, Burp Suite, or similar.
• Proficiency in programming languages such as Java, Python, C#, or JavaScript.
• Familiarity with cloud security principles and securing cloud-based applications.
• Relevant security certifications (CISSP, CEH, or equivalent) preferred.

Technologies & Tools

The Senior Application Security Engineer will utilize a range of technologies and tools that enhance application security. This includes secure coding software, vulnerability scanning tools, application monitoring systems, threat modeling frameworks, and incident response tools. Familiarity with DevSecOps practices and tools such as Docker, Kubernetes, and AWS security services will also be beneficial for this role.

Ideal Candidates

Ideal candidates for this position will possess a strong analytical mindset and an unwavering attention to detail. They should demonstrate excellent problem-solving skills and the ability to think critically about software security challenges. Strong communication skills are essential for collaborating with cross-functional teams and educating staff on security best practices. A proactive and self-motivated approach to staying updated on the latest security threats and trends will be important for success in this role.