Application Security Engineer

WHAT YOU'LL NEED TO SUCCEED:

Education : Bachelor's degree in Computer Science, or related technical field, OR equivalent combination of education and experience

Required Experience :

8+ years Information Technology.

5+ years in software development role as a Developer, or Architect

Java/Web development with strong secure coding background in RHEL and JBoss.

3+years with Application Security Engineering conducting assessments, penetration testing, implementing tools for dynamic /automated code review, dynamic and static application scanning (Fortify, SonarQube); consulting on security designs of applications, potential vulnerabilities, and remediation, and creating training materials on key security concepts.

Hands-on experience assessing new code commits, pull requests, and architecture changes for vulnerabilities, misconfigurations, and compliance risks.

Hands-on experience integrating AI-driven code analysis platforms into CI/CD pipelines to identify vulnerabilities and insecure coding patterns before deployment.

Hands-on experience designing and executing a repeatable process to aggressively prioritize issue dispositions and remediations of security findings - while providing clear, concise status updates and risk reporting to leadership and stakeholders.

Skills :

Strong oral and written communication skills, with a demonstrated ability to communicate complex topics to colleagues, and management.

Demonstrated collaboration and teaching abilities.

Strong analytical skills.

Identify and resolve problems in a timely manner; gather and analyze information skillfully; develop alternative solutions.

Critical thinking and creative problem solving

CISSP, CEH, CISA, OSCP, OSCE, or OSWE Certifications