Application Security Specialist

Job Overview:

We are seeking an experienced Application Security Specialist to join our team. This role will collaborate with the DevOps department as part of our Cybersecurity team to anticipate and report vulnerabilities in both client-facing and internal applications for remediation. The ideal candidate will not just be an expert in application security, but have the expertise and capability to provide technical leadership and guidance on security best practices to the entire development team.

Key Responsibilities:

• Perform proof of concept testing for new applications
• Analyze proprietary and third-party packages to identify and address security concerns
• Guide development teams on defensive coding and remediation techniques
• Provide security training and guidance for developer teams to encourage SDLC
• Review existing applications and software to identify security improvements
• Develop and refine app and product security best practices
• Maintain documentation of application security controls
• Oversee penetration testing and provide retesting support
• Serve as a subject matter expert on common attack vectors and application security for developer teams and organization leadership

Skills and Qualifications:

• Security+, equivalent, or higher level certification (e.g. GSEC, CEH, CISSP)
• 3+ years of experience in an IT role, preferably in a security team
• Knowledge of secure development lifecycle principles
• Experience establishing software development policies
• Experience assessing vulnerabilities in software and systems
• Experience with application design, risk assessment, and penetration testing
• Strong problem-solving and analytical skills

Preferred Experience:

• Deep knowledge of common security vulnerabilities
• Proficient in at least one programming language such as Java, .NET, or Python
• Experience performing blackbox, greybox, and whitebox security assessments of web-based applications
• Knowledge of application architectural patterns (MVC, Microservices, etc.)

Application Process:

To apply, review the job description and submit your resume, portfolio, and cover letter to View email address on click.appcast.io. Please ensure that your contact information is accurate for any status updates regarding your application. If selected, you will be contacted to discuss your qualifications and how they align with the organization's mission.

Note: Candidate need to be currently located in North America (Continental USA or Canada) during application and for the duration of their tenure at Menzies

For any questions, feel free to reach out to View email address on click.appcast.io . We look forward to reviewing your application.

Equal Opportunity Employer:

Menzies Philanthropic Foundation is committed to diversity, inclusion, and equal opportunity. We welcome applicants from all backgrounds and do not discriminate based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or any other characteristic protected by law. Accommodation for the application process is available upon request.