Cybersecurity - Security Engineer Sr.

MILLENNIUM
Plano, TX, United States
10 days ago
Apply on www.dice.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
6 years minimum
Working hours
Regular working hours
Job source

Tech stack

Application Programming Interfaces (APIs) Artificial Intelligence Cyber Security Continuous Integration Information Security Management Systems Development Life Cycle Secure Coding Security Software Mobile Security Software Engineering Systems Integration Software Vulnerability Management
+8 more
Scripting Software Security GWAPT Infrastructure Automation Frameworks Devsecops Static Application Security Testing Vulnerability Analysis Dynamic Application Security Testing

Job description

  • Administer and support Application Security Posture Management (ASPM) platforms and security tooling.
  • Create and tune security policies that determine when vulnerabilities should be escalated, ticketed, suppressed, or prioritized.
  • Analyze and validate SAST and SCA findings, including root cause analysis and false-positive identification.
  • Partner with development teams to provide secure coding guidance and remediation recommendations.
  • Support secure SDLC initiatives and DevSecOps practices across application development teams.
  • Assist with platform escalations, vulnerability triage, and security operations activities.
  • Leverage automation, APIs, and AI-assisted workflows to improve application security operations.
  • Collaborate with cross-functional teams to strengthen security controls throughout the development lifecycle.

Requirements

  • 6-10 years of cybersecurity or application security experience, with more than six years preferred.
  • CISSP certification required.
  • Deep understanding of Secure SDLC and application security principles.
  • Experience with Application Security Posture Management (ASPM) platforms or similar vulnerability management technologies.
  • Hands-on experience working with:
  • Static Application Security Testing (SAST)
  • Software Composition Analysis (SCA)
  • API Security Testing
  • DAST
  • Infrastructure-as-Code (IaC) Security
  • Mobile Security Testing
  • Ability to read and understand code for vulnerability analysis and root cause identification.
  • Experience identifying false positives and validating security findings.
  • Familiarity with DevSecOps practices, CI/CD pipelines, and automated security controls., * Experience integrating and optimizing AppSec tools and platforms.
  • Scripting and security workflow automation experience.
  • Experience using AI-driven security analysis and policy enforcement capabilities.
  • GWEB, GWAPT, CSSLP, or equivalent application security certifications.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com
Prepare application

Good distractions

Loading talks and stories from around this role…