Employer Active
Job Alert
You will be updated with latest job alerts via emailJob Alert
You will be updated with latest job alerts via emailWe are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long term project. Here are a few details.
Job Description
We are seeking an experienced Application Security Engineer to join our Information Security team. Our application security program ensures that all software whether developed in-house or acquired meets GreenDot s stringent security standards while enabling rapid innovation to meet customer needs. This role will focus on enhancing existing security processes and collaborating with development leaders to integrate security best practices throughout the software development lifecycle.
Key Responsibilities
Embed security practices into the software development pipeline.
Manage the Application Security Assurance program (SAST/DAST/SCA) and review results to ensure compliance with security standards.
Conduct code reviews and propose secure architecture designs.
Act as a Subject Matter Expert (SME) for enterprise projects providing security consulting and recommendations during development phases.
Perform security and design reviews as well as penetration testing for internal applications and external partner solutions.
Test the security of web applications web services (SOAP/REST) and mobile applications (iOS/Android).
Possess familiarity with network and infrastructure penetration testing practices.
Support the adoption of secure design principles in line with organizational policies standards and patterns.
Collaborate with security vendors and service providers for product evaluations proof-of-concepts and pilot deployments.
Qualifications & Competencies
Bachelor s degree in Computer Science Software Engineering or related field (or equivalent experience).
6 10 years of experience in penetration testing secure code reviews and static/dynamic/manual source code analysis.
Hands-on development experience with Java JavaScript and C#.
Proficiency with security testing tools for SAST DAST IAST and penetration testing (e.g. BurpSuite).
Experience conducting manual penetration tests for web thick client mobile and web services.
Strong knowledge of attack methods mitigation techniques bug bounty programs and threat modeling.
Skilled with tools like BurpSuite Mobile SDKs SOAPUI and debuggers.
Deep understanding of software and web vulnerabilities (OWASP Top 10 SANS/CWE Top 25).
Knowledge of Single Sign-On (SSO) OAuth and SAML frameworks.
Familiarity with GitHub Advanced Security and scripting languages (Python preferred).
Strong passion for security topics and engineering excellence.
Excellent verbal and written communication skills.
Ability to quickly learn new technologies and handle complex technical challenges.
Relevant certifications (CISSP OSCP GPEN CPT) are a plus.
Full Time