Application Security Engineer

Application Security Engineer

The application security engineer shall have extensive experience in the involvement and understanding of cloud security controls (security-as-code) and Prime’s target cloud infrastructure Google Cloud Platform (GCP).

Must be proficient in reading, writing, analyzing and assessing Terraform code/scripts and conducting security code-reviews.

Daily Responsibilities/Job Description:

• Reading, writing, analyzing and assessing code/scripts for security vulnerabilities.
• Running various application security testing tools and interpreting their findings
• This position will focus on reviewing the current security-as-code infrastructure and the security of applications deployed in GCP.
• This position will have an in-depth understanding of CI/CD development processes, tools and technologies and will be responsible for promoting security code changes through the CI/CD pipeline.
• This position must have a solid understanding of python, git, and other development languages is necessary.
• This role will also require that the individual be familiar with current and emerging cloud technologies and tools.

Skills Overview:

• Application development tools and practices
• Automation, CI/CD tools
• Integrating security into application development (e.g. code reviews, security testing)
• Prior Cybersecurity or some Information security experience

Must Haves:

• Reading, writing, analyzing and assessing code in one or more languages (Java preferred)
• Public (AWS, Azure, GCP) or private cloud (VMware, Dell/EMC) IaaS/PaaS/aPaaS experience
• Familiarity with application security issues and mitigation (e.g.