Application Security Engineer

IBA InfoTech Inc.

Greensboro, NC, United States

about 2 months ago

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

4 years minimum

Working hours

Regular working hours

Job source

ibainfotech.com

Tech stack

Java (Programming Language) Agile Methodology Burp Suite Code Review DevOps Dynamic Program Analysis Mobile Application Software Network Architecture Systems Development Life Cycle Fortify (Software) Web Application Security Software Engineering

+9 more

Webinspect Software Security Veracode Firewalls (Computer Science) GWAPT Information Technology Checkmarx Appscan Burpsuite

Job description

Responsibility for the security of LFG applications and services
Conduct design review, code review, and dynamic analysis
Identify, communicate, and drive the resolution of vulnerabilities
Serve as a subject matter expert for application development and infrastructure teams
Communicate effectively with a wide variety of technical levels
Perform security assessments of web and mobile applications
Research and advocate for new security solutions and technologies
Stay current on security trends, vulnerabilities, and testing methods
Contribute to related policies, standards, and supporting documentation

Requirements

Undergraduate degree or 4+ years of comparable work experience
OSCP, OSWE, ISC2 CISSP, CSSLP, GIAC GWAPT, GIAC GSSP-Java, GIAC GSSP-NET Preferred, * 5-7+ years of experience in Information Technology that directly aligns with the specific responsibilities for this position
Extensive experience in web application security
Strong knowledge of application security throughout the SDLC
Experience with agile delivery practices
Experience integrating security into DevOps practices.
Experience conducting source code review preferred
Experience using static application security testing tools such as Fortify, Checkmarx, Veracode, etc.
Experience dynamic analysis with tools such as AppScan, Webinspect, BurpSuite, and OWASP ZAP, etc.
Familiarity with related network infrastructure, such as firewalls, WAFs, and IPS
Familiarity with common DMZ architectures
Prior financial services experience preferred
Agile Mindset; awareness/understanding of Agile methodologies