Senior Application Security Engineer

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Take2 Consulting, LLC, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Senior Application Security Engineer at Take2 Consulting, LLC is responsible for ensuring the security of applications developed and maintained by the company. This role involves collaborating with development teams to integrate security best practices throughout the software development lifecycle, conducting security assessments, identifying vulnerabilities, and implementing effective remediation strategies. The Senior Application Security Engineer will play a key role in enhancing the overall security posture of the organization by promoting a culture of security awareness and providing guidance on secure coding principles and practices.

Job Responsibilities

• Conduct security assessments and vulnerability analyses of applications and systems.
• Collaborate with development teams to embed security throughout the software development lifecycle.
• Provide recommendations for secure coding practices and remediation of identified vulnerabilities.
• Develop and execute application security testing strategies, including static and dynamic analysis.
• Stay abreast of the latest security trends, threats, and vulnerabilities impacting application security.
• Create and deliver security awareness training to development teams.
• Participate in incident response and security breach investigations as necessary.
• Maintain documentation of security assessments and compliance requirements.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Minimum of 5 years of experience in application security or a related technical field.
• Strong knowledge of secure coding practices and familiarity with OWASP Top Ten risks.
• Experience with application security testing tools and frameworks, such as SAST, DAST, and IAST.
• Proficient in at least one programming language (e.g., Java, C#, Python, JavaScript).
• Certifications such as Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), or Application Security Certification (GWEB) are preferred.
• Excellent problem-solving skills and attention to detail.
• Strong communication skills with the ability to convey complex security concepts to non-technical stakeholders.

Technologies & Tools

The Senior Application Security Engineer will utilize various technologies and tools to perform their duties. This includes using security testing tools such as Fortify, Checkmarx, and Burp Suite for application assessment and vulnerability scanning. Familiarity with CI/CD tools like Jenkins or GitLab for integrating security into the development pipeline is essential. The role may also require proficiency in threat modeling techniques and the use of frameworks such as OWASP for establishing industry security standards.

Ideal Candidates

Ideal candidates for the Senior Application Security Engineer position will possess a blend of technical expertise and strong interpersonal skills. They should be proactive and detail-oriented, demonstrating a deep understanding of both security principles and software development practices. Candidates will ideally have a genuine interest in improving the security landscape and a passion for educating others in the importance of security in application development. The ability to work collaboratively in a team environment while managing multiple priorities will greatly contribute to their success in this role.