Information Security Engineer IV

Application security engineer will be executing automated application Security tools for security
weaknesses, performing vulnerability scans, managing security tools and providing security guidance to software development teams.

Responsibilities:

• Execute automated SAST and SCA scans to identify security vulnerabilities in web, API, and mobile applications.
• Perform manual secure code reviews to validate findings and detect security issues not identified by automated tools.
• Analyze vulnerability scan results, prioritize risks, and provide remediation recommendations to development teams.
• Collaborate with developers to resolve security issues and promote secure coding best practices.
• Integrate application security testing into the Software Development Life Cycle (SDLC) to ensure security is embedded throughout development.
• Manage application security tools, perform re-validation of fixes, and support continuous improvement of the organization's application security posture.

Key Skills Required:

• Expertise in automating secure coding tools and processes (SAST, SCA, DAST, Mobile & API Security).
• Review security test results from vulnerability scans, penetration testing for true positives and propose appropriate remediation measures or mitigation control.
• Experience with programming languages such as Java, Python, or Go, and at least one scripting language.
• Knowledge on WAF.
• Knowledge of web, mobile, API, Microservices and network pen testing.
• Knowledge of security best practices, principles, and common security frameworks, such as NIST and OWASP,
  etc.
• Knowledge of current and emerging security technologies, threats and techniques for exploiting security vulnerabilities.
• Knowledge of AWS, Azure, Google cloud or Oracle is preferable.
• Knowledge on securing container platforms such as docker and Kubernetes.
• Ability to interact with a broad cross-section of personnel to explain and enforce security measures.
• Good written and verbal communication skills.
  Education & Experience:
• Bachelor's degree in Computer science, Information Technology, Cyber Security, or related discipline or equivalent experience.
• 4 to 6 years of Application Security experience with knowledge on security tools and vulnerabilities.
• Certifications: - CSSLP - GWAPT - CEH - CISSP - CCSP

Required Skills