Senior Application Security Engineer (Remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Cisco Meraki, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Senior Application Security Engineer at Cisco Meraki will play an integral role in safeguarding the company’s applications and systems from security threats. The successful candidate will collaborate with cross-functional teams to identify, assess, and mitigate risks while ensuring compliance with security policies. You will utilize your expertise in application security to conduct code reviews, security assessments, and vulnerability testing, thereby enhancing the security posture of our product offerings. Additionally, as a senior member of the team, you will mentor junior members and contribute to building a culture of security awareness throughout the organization.

Job Responsibilities

• Conduct risk assessments and vulnerability analyses on applications, frameworks, and infrastructure.
• Perform thorough code reviews to identify security weaknesses and recommend improvements.
• Create and maintain application security standards, guidelines, and best practices to enhance development processes.
• Collaborate with developers to remediate security vulnerabilities and integrate security into the software development lifecycle.
• Evaluate and implement security tools and technologies to automate security processes.
• Stay current on industry trends, emerging threats, and vulnerability disclosures to inform security strategies.
• Lead and mentor junior security engineers, fostering a culture of security best practices.
• Contribute to incident response investigations and collaborate in post-mortem analysis.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field; Master’s degree preferred.
• Minimum of 5 years of experience in application security or related field.
• Proficiency in secure coding practices and experience with multiple programming languages such as Java, Python, or JavaScript.
• Hands-on experience with security testing tools, including SAST, DAST, and SCA solutions.
• Strong knowledge of security frameworks and standards such as OWASP, NIST, and ISO 27001.
• Excellent analytical and problem-solving skills.
• Relevant security certifications (e.g., CISSP, CSSLP, or CEH) are an advantage.

Technologies & Tools

The Senior Application Security Engineer will be expected to work with a variety of technologies and tools, including but not limited to source code management systems (e.g., Git), CI/CD pipelines, security testing tools (e.g., Veracode, Checkmarx), container security solutions, and cloud security platforms. Familiarity with cloud infrastructures such as AWS, Azure, or Google Cloud is also essential, as well as tools for monitoring and logging (e.g., Splunk), for effective identification and remediation of security issues.

Ideal Candidates

The ideal candidates for the Senior Application Security Engineer position possess a proactive mindset with a passion for security and technology. They are detail-oriented, demonstrating rigorous analytical skills and a commitment to continuous learning in the rapidly evolving cybersecurity field. They thrive in collaborative environments, are excellent communicators, and can effectively articulate security concerns to technical and non-technical stakeholders alike. Additionally, they should display strong leadership qualities, capable of guiding a team toward achieving shared goals while cultivating a culture of security awareness across all organizational levels.