Listing Description
Experience in application development (Java EE, Python, web APIs, C++/C#, .Net, and/or Linux scripting)
Experience with Application Security and Application Penetration Testing
Strong understanding of a variety of application development architectures, platforms, methodologies, and supporting operating systems
Understanding of web hosting platforms and web services (AWS preferred).
Working knowledge of remediation methods (OWASP Top 10 at a minimum)
Understanding of enterprise computing environments, distributed applications, and container technology (Docker preferred)
Exceptional interpersonal and communication skills
Experience working in a team-oriented, collaborative environment and ability to present ideas in a user-friendly language
Bachelor’s Degree in Computer Science or equivalent experienceConduct tests to evaluate and demonstrate the impact of software misconfiguration and vulnerabilities on in-house applications
Model attacker behavior and help teams evaluate their resilience to known attack methodologies
Provide security consultation to project teams, application owners, and general technology teams on relevant security controls and Secure-SDLC process requirements
Build & Monitor systems that ensure application security policies, coding standards and required security controls are being followed and appropriately mitigating threats
Assist with required security education initiatives and foster a security-conscious culture within AppDev teams
Develop, Enhance, and Participate, as needed, in security portion of Secure-SDLC
Analyze and provide remediation guidance for identified vulnerabilities; validate and verify remediation implementation
Participate and lead Information Security projects to expand AppSec capabilities
Listing Details
- Citizenship: Us Citizen
- Incentives: Bonus
- Education: No Requirements
- Travel: No Travel
- Telework: Optional Telecommute