Security Engineer, Application Security

Responsibilities

• Perform security assessments: Conduct regular security assessments, code reviews, and penetration testing to identify vulnerabilities in applications and software.
• Develop and implement security tools: Design, develop, and implement security tools, frameworks, and methodologies to protect applications against security threats.
• Collaborate with development teams: Work closely with development teams to ensure security best practices are integrated throughout the software development lifecycle (SDLC), including secure coding guidelines.
• Threat modeling and risk assessment: Conduct threat modeling and risk assessments to proactively identify potential risks and develop mitigation strategies.
• Vulnerability management: Track, analyze, and manage vulnerabilities in applications, providing guidance and support for remediation efforts.
• Incident response support: Assist in investigating, analyzing, and responding to security incidents related to applications, ensuring timely resolution and documentation of incidents.
• Stay current on security trends: Continuously stay updated on the latest security threats, vulnerabilities, and technologies to enhance security measures in applications.

Requirements

• Extensive experience in information security, cybersecurity, or a related field.
• Deep understanding of security technologies, tools, and best practices, including secure coding practices, threat modeling, risk assessments, and incident response.
• Experience in application security, software development, or related areas with a strong understanding of secure coding practices and application security frameworks.
• Proficiency in programming languages (such as Python, Java, C++).
• Knowledge of security tools (e.g., Burp Suite, OWASP ZAP).
• Familiarity with security protocols and encryption methods.
• Strong written and verbal communication skills.