Application Security Engineer

Client is looking for an individual contributor to backfill a current consultant that can't convert to direct. This person will be joining a Software Security Team of 4 individuals and main responsibilities will be to provide software remediation to existing vulnerabilities within technology/applications or software in production. Additionally, addressing vulnerabilities in frameworks and "stop the bleeding" activities and help create the road map. This is all mortgage software systems Skill set is software engineering first with a specialty in security. Developer background with experience in all types of application security testing specific to Software composition Analysis.

MUST HAVE


Communications skills - excellent verbal and written
Energy, excitement, solid presence about them



Technical Software background:

• React, Java, Node, Python

Understanding of web application security, static security testing, cloud security, container security - tools, scan, triage, risk evaluation and remediation.
Thorough understanding and experience in identifying and mitigating application vulnerabilities publicized by OWASP, WASC, CWE, CVE etc.
Hands on experience with tools such as Sonatype, Qualys, SonarQube, and AWS Inspector.
Has advised and guided teams with secure coding practices and design best practices for security risk recommendation and remediation