Application Security Engineer - #01UUT

We are seeking a motivated Application Security Engineer. This position will be located in St. Louis, MO and reporting to the Application Security Lead.

As an Application Security Engineer in the Information Security Office, the successful candidate will be responsible for helping to ensure that software is designed and developed securely while supporting the agility to rapidly develop products for our business and customers. Through collaboration across IT, this role will help create and foster a culture of secure application development., Partner with application development teams to understand business needs and develop appropriate application security controls. This will involve working closely with scrum teams to understand current Application Security Practices and Maturity Apply reusable application security patterns, frameworks, and best practices leveraging industry best practices (ISO, OWASP, NIST, SANS) Foster a culture of secure application development by assisting Scrum Teams in adopting secure coding best practices and frameworks and practices to ensure compliance Assist teams with overall implementation of cyber security requirements within applications and related to working within security parameters of hardened systems Perform ongoing application security work to measure, monitor, and roll out continuous improvement

Bachelorâ??s Degree, preferred 3+ years of experience in Application Development, required Technical depth in application security technologies with knowledge of application security threats Experience with software security threat vectors Passion for collaboration and partnership with application development teams working with agile development methodologies Familiarity with modern web development (e.g., HTML5, JavaScript, NPM, React) Experience with large-scale, custom distributed software systems (e.g., Java, Scala, C#) Understanding of system design with API’s/REST/Micro Services Knowledge of relational database design and access (e.g., PostgreSQL, Oracle, MS SQL,) Ability to think strategically and give practical advice by balancing business needs with risks Strong written and verbal communication skills, as well as the ability to collaborate within a matrix organization Ability to translate technical topics for non-technical personnel & leadership teams Desired Skills/Experience:

Familiarity with secure development within a Cloud environment (GCP, AWS, Azure) ; Experience developing and deploying Secure Mobile Applications Experience with NoSQL stores (e.g., MongoDB, Couchbase, Neo4J) ; Experience with search and logging tools (e.g. ElasticSearch, CloudWatch, Splunk) Experience with threat modeling, attack surface analysis, penetration testing, and vulnerability assessments Experience with static and dynamic application security testing 1+ years of experience in Application Security Certification (e.g., CISSP, GIAC, AWS) Bayer successfully completed the acquisition of Monsanto in June 2018, bringing together Monsantoâ??s leadership in seeds and plant traits with Bayerâ??s leadership in chemical and biological crop protection. By joining forces, we will create even more extensive career opportunities for talent around the world. Weâ??re a global team working to shape agriculture through breakthrough innovation that will benefit farmers, consumers, and our planet.