Application Security Engineer

Application Security Engineer

Location: Remote

Purpose: The application security engineer shall have extensive experience in the involvement and understanding of cloud security controls (security-as-code) and target cloud infrastructure Google Cloud Platform (GCP). Must be proficient in reading, writing, analyzing and assessing Terraform code/scripts and conducting security code-reviews.

Position Overview: Daily Responsibilities/Job Description:

• Reading, writing, analyzing and assessing code/scripts for security vulnerabilities.
• Running various application security testing tools and interpreting their findings.
• This position will focus on reviewing the current security-as-code infrastructure and the security of applications deployed in GCP.
• This position will have an in-depth understanding of CI/CD development processes, tools and technologies and will be responsible for promoting security code changes through the CI/CD pipeline.
• This position must have a solid understanding of python, git, and other development languages is necessary.
• This role will also require that the individual be familiar with current and emerging cloud technologies and tools.

Skills Overview: Qualifications/years of experience: 3-5yrs Experience working with:

• Application development tools and practices
• Automation, CI/CD tools
• Integrating security into application development (e.g. code reviews, security testing)
• Prior Cybersecurity or some Information security experience

Must Haves:

• Reading, writing, analyzing and assessing code in one or more languages (Java preferred)
• Public (AWS, Azure, GCP) or private cloud (VMware, Dell/EMC) IaaS/PaaS/aPaaS experience
• Familiarity with application security issues and mitigation (e.g.)