| Sr. Application Security Engineer || Draper, Utah at Draper, Utah, USA |
| Email: [email protected] |
| Sr. Application Security Engineer (Draper Utah, In-Office) As an Application Security Engineer foyou will work to support the various processes and procedures related to application security and gather information from product engineering teams related to these activities. You will make a difference in promoting a culture of security inside the engineering organization and work with engineers to produce more secure applications. You will work to both collect and disseminate information throughout the business to ensure processes and procedures are operating efficiently and effectively. You will support the developers in their efforts to secure our applications and assist in the documentation and tracking of various application security and cloud. What You Will Do Collaborate with engineers, consultants, and leadership to address security risks and provide mitigation recommendations within the Secure Development Lifecycle (SDLC) Build automated code scanning tools to identify security vulnerabilities in application code and infrastructure code using both open source and commercial tools Integrating open-source and/or commercial static application code scanning tools with the CI/CD Pipeline Enable secure-by-default best practices by developing libraries and frameworks to prevent future vulnerabilities Operate at enterprise scale by building and managing tools that help test, monitor, and improve application security Develop security standards, preferred implementation patterns, secure common frameworks, and developer documentation and educational materials Provide secure developer training to software engineers on how to write secure code and follow best practices Conduct web app penetration testing, code scanning, dependency scanning that can be incorporated into SDLC process and CI/CD pipeline Work closely and together with the development team to provide guidance and mitigate security vulnerabilities Perform security architecture and design reviews of all systems and applications developed at Acima Provide a leadership role in the development, implementation and maintenance of consistent application and infrastructure architecture security programs Qualifications 3+ years of experience working in an application security role You have a background in web application development and/or code auditing and can get deep into the code to find and resolve security problems You have experience with static and dynamic code analyzers You have experience with software composition analysis tools Web application penetration testing and source code vulnerability analysis skills Extensive knowledge of internet security issues, cloud architectures, and threat landscape General understanding of application and cloud security threats and vulnerabilities, including OWASP top 10, SANS top 25 etc. Professional security certification: CISSP, GIAC, GWEB, GWAP or other similar credentials. Experience with BurpSuite, Zed Attack Proxy (ZAP), or similar dynamic testing tool Knowledge of current development practices, including containerized applications, microservice architectures, serverless architectures, native mobile applications, responsive web applications, etc. a plus Regards, Sandy M | 1Point System LLC Lead Technical Recruiter Direct: (803)-828-2974 Email: [email protected] Fax: 803-832-7973 www.1pointsys.com 115 Stone Village Drive Suite C Fort Mill, SC 29708 : https://www.linkedin.com/in/sandy-m-74b06b212/ An E-Verified company | An Equal Opportunity Employer -- Keywords: continuous integration continuous deployment information technology South Carolina Sr. Application Security Engineer || Draper, Utah [email protected] |
| [email protected] View all |
| Wed Nov 13 19:26:00 UTC 2024 |