Application Security Engineer II

Application Security Engineer II

• What this position will be doing:
  • This position will be a liaison between the application development team and the Information Security team. This role will be focusing on security but how do we help the app dev team secure code. They will look at solution designs when bringing in new systems to make sure security has been reviewed and that we're doing it throughout development. The role will change a lot from a day-to-day perspective, where you could be looking at vulnerabilities and talking with the app/dev team, sitting in on project meeting and making sure security is involved and things are set up properly as well as looking at system design lifecycles.
  • Hybrid Schedule: 4 days in office and one day remote. Likes to have the team in on Tuesdays.

• Must haves:
  • Bachelor's or Master's degree in computer science, Cybersecurity, Information Systems, Software Engineering, or a related technical discipline
  • Experience performing application security assessments and validating remediation efforts.
  • Experience working with software development teams throughout the System Design Life Cycle (SDLC).
  • Experience with a Container Security platform. (Kubernetes, Docker)

• Wants/ Preferred knowledge:
  • Experience implementing DevSecOps practices.
  • Experience developing custom security automation.
  • Experience administering application security tooling.

• Soft Skills:
  • Strong written and verbal communication.
  • Ability to explain technical security risks to non-security stakeholders.
  • Strong analytical and problem-solving skills.
  • Ability to manage multiple projects simultaneously.
  • Self-directed with strong organizational skills