Senior Applications Engineer - Cyber Security Expert
Location: Burlingame CA (Day-1 Onsite)
Duration:- Long Term Contract
Technical Responsibilities:
- 10 years of combined experience in software development security engineering and security regulatory and compliance with at least 5 years of experience in security engineering
- Strong understanding of security principles threat modeling and risk assessment
- Experience with secure coding practices vulnerability remediation and security testing
- Familiarity with regulatory requirements for medical devices (e.g. FDA CE)
- Experience with mobile application security domain and issues (both Android and iOS)
- Experience with embedded systems/IoT devices a plus
- Should be hands-on with Open Web application security project OWASP procedures
- Hands-on with Static code analyzer tools like Valgrind to trace Buffer overflow Stack overflow memory leaks API testing
- Hands-on with code reviews to identify potential issues
- Fluent with code injection attacks - SQL NoSQL OS command Object Relational Mapping (ORM) LDAP and Expression Language (EL) or Object Graph Navigation Library (OGNL) injection
- Identify risks during firmware update
- Identify risks in Cryptography signature
- Able to guide and hands-on with Toolchain hardening
- Able to identify Identity and Access management attacks
- Data collection storage privacy
- Transport layer security
- Threat modeling-
- Identifying all assets in a system
- creating an architecture overview
- Decomposing the system (or device)
- Identification of threats
- Document all the threats with their respective scenarios
- Rate each threat by its likelihood as well as impact using a rating system