Senior Application Security Engineer

Job not on LinkedIn

August 28

🏄 California – Remote

Although this job is listed in California, this company may be open to hiring remote in other states.

💵 $111.5k - $174.7k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

🦅 H1B Visa Sponsor

Apply Now

Receive Emails with Similar Jobs

Ventura Foods

WebsiteLinkedInAll Job Openings

B2B • Food & Beverage • Manufacturing

Ventura Foods is a company that specializes in the production and manufacturing of high-quality food products, focusing on culinary solutions for various sectors. They are involved in operations that include manufacturing, engineering, quality assurance, and supply chain management, with a commitment to employee development and customer satisfaction. The company is also dedicated to maintaining a high standard of operations through research and development, ensuring innovation in their offerings.

1001 - 5000 employees

🤝 B2B

📋 Description

• Develop and implement a Threat Modeling program that drives a Secure by Design SDLC process while working to train and educate stakeholders • Identify, document, rate, and communicate vulnerabilities in terms of Confidentiality, Integrity and Availability • Undertake static and dynamic application security assessments for Ventura Foods Entities • Assess applications for vulnerabilities using manual and automated methods, threat modeling, code reviews, SAST/DAST/Open-Source tool scans, penetration testing • Develop, curate, and improve application security detections (static and dynamic) to identify vulnerabilities at scale • Facilitate conversations between developers and security teams to further the security of Ventura Foods software • Mentor and train developers on secure code best practice

🎯 Requirements

• 8 years of work experience with a Bachelor's Degree or at least 2 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) • 3+ years of relevant application security experience • Deep understanding of OWASP Top 10 and CWE 25; with experience in implementing remediation strategies • Deep knowledge and experience in using SAST, DAST and Open-Source Vulnerability Scanning tools • Hands-On experience with any programming language (React, C#, JavaScript, Java, Go, Python, etc) • Well versed in web application design, penetration testing, application risk assessment and risk categorization • Well versed with driving and implementing DevSecOps practices to develop ability to successfully integrate security into a developer's world • Ability to effectively present and communicate security threats and risks to ANY audience and impress upon them the mitigation techniques and strategies • Solid problem solving and analytical skills; able to quickly digest any issue/problem encountered and recommend an appropriate solution • Burpsuite, OWASP Zap, SNYK.io, Metasploit, InsightVM, StackHawk

🏖️ Benefits

• Medical, Prescription, Dental, & Vision – coverage beginning on your 1st day for eligible employees • Profit Sharing and 401(k) matching (after eligible criteria is met) • Paid Vacation, Sick Time, and Holidays • Employee Appreciation Events • Employee Assistance Programs