Security Engineer (AppSec)

SysLogic, Inc. is looking for a talented and experienced Security Engineer (Software Focus) to join our team. As a Security Engineer (Software Focus) at SysLogic, you will be responsible for identifying and mitigating potential security vulnerabilities in for our managed services clients. You will work closely with development teams to ensure that our applications are secure from external threats and meet industry security standards.

Responsibilities

• Conduct regular security assessments and penetration testing of software applications and products.

• Identify and prioritize potential security vulnerabilities and develop plans for remediation.

• Collaborate with development team to implement secure coding practices and ensure security best practices are followed.

• Stay up to date with the latest security vulnerabilities, trends, and best practices.

• Participate in security architecture design and application design reviews.

• Provide training and mentorship to Developers on coding practices to remediate identified vulnerabilities.

• Be an informed Security partner by presenting past experience working as a hands-on software developer. Ideally utilizing the Microsoft Development stack.

• Actively participate in the deep review of pen test and vulnerability assessments both in person with clients and remotely.

• As needed provide training on secured development principals in both remote and in person settings.

• Bachelor’s degree in computer science, related field or equivalent experience.

• 5+ years of experience in application security or related role.

• Strong knowledge of web application security vulnerabilities and best practices.

• Direct knowledge of pen testing processes and tools, with responsibility for remediating vulnerabilities. (Such as Qualys, BurpSuite, Snyk, SCA)

• Experience with security assessment tools and techniques.

• A minimum of two years working as a Full Lifecycle Developer creating enterprise-based applications, preferably using the Microsoft Development stack (.NET, .NET Core, Azure).

• Knowledge of secure coding practices and familiarity with common programming languages (e.g., C#, Java, C++, Python).

• Familiarity with security frameworks and standards (e.g. OWASP, NIST).

• Excellent problem-solving and analytical skills.

• Strong oral and written communication and collaboration skills.

• Experience working with embedded systems or device controls is a plus.

• Certifications a plus, such as: Certified Ethical Hacker, Certified Information Security System Professional, Certified Cloud Security Professional.

• Ability to travel 4-6 times per year with no more than 20 days away from home in a calendar year.

• Health Care Plan (Medical, Dental & Vision)

• Retirement Plan (401k)

• Life Insurance (Basic, Voluntary & AD&D)

• Paid Time Off (Vacation, Sick & Public Holidays)