As a Senior Application Security Engineer you will work closely with the engineering teams and play a pivotal role in ensuring that security is integrated at every stage of the software development lifecycle.
Responsibilities
- You will provide guidance to engineers on secure coding practices participate in coding reviews to identify any potential security vulnerabilities and advise on remediation strategies
- Conduct security reviews to evaluate applications for potential vulnerabilities
- Own threat modeling Understand the applications architecture identifying potential attack vectors and devising strategies to mitigate these threats
- Integrate security tools and processes into the DevOps pipeline
- Assist in response and recovery in the event of a security incident or breach
- Raise awareness about application security within the organization.
Requirements
- 5 years of experience as an Application Security Engineer
- Proficiency in multiple programming languages with an understanding of the intricacies and potential security flaws
- Experience with cloud technologies
- Knowledge of secure coding practices
- Proficiency with security tools and technologies static/dynamic analysis tools penetration testing tools knowledge of firewalls intrusion detection systems and encryption.
- Excellent communication and collaboration skills.
- Must be able to articulate complex security concepts to engineers and other stakeholders in a simple understandable way.
- Ability to write clear and concise security reports and presenting findings to both technical and nontechnical audiences
- Ability to work effectively as a team with engineers respect different perspectives and collaborate towards a common goal with business priorities in mind
- Problem solving and critical thinking skills.
- Deep understanding of the problem space and a systematic approach to problem solving is a must.
- Ability to critically evaluate the security of a system assess the impact of potential vulnerabilities and consequences of different security decisions
Nice to have:
- Bachelors degree in Computer Science Engineering or a related technical field
- Familiarity with application security frameworks and standards like NIST CIS CSA etc
- Experience in a fast paced startup environment
- Golang experience
- Experience with AWS technologies