Security Engineer – Application Security

🕒 June 27

🔔 Pennsylvania – Remote

🔔 Pennsylvania – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Fragomen

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1951

⚖️ Legal

💼 Consulting

📋 Compliance

Legal • Consulting • Compliance

Fragomen is a global firm of immigration attorneys, solicitors, and consultants that provides immigration and mobility services to employers and individuals worldwide. The firm publishes research and insights (including worldwide immigration trends reports and regional overviews), issues immigration alerts, hosts events and webinars, and operates a Center for Strategy and Applied Insights to develop policy and compliance guidance. Fragomen also engages in technology and strategic partnerships (for example, a joint venture on digital identity solutions) to support immigration compliance, workforce mobility, and related advisory services.

📋 Description

• Build, deploy and maintain tooling to validate and track security controls in and around our code • Work closely with application development and infrastructure architectural teams to create code which is secure by design and default • Triage programmatic source code findings and automate penetration testing to decrease potential introduction of vulnerabilities • Lead and collaborate with developers on secure coding techniques and threat modeling • Contribute to vulnerability detection and remediation of technological offerings • Deploy developed or OTS security applications to support our efforts • Participate in a cross-functional response to cyber security incidents • Work closely with the security team to establish prevention, detection and mitigation techniques • Support the scoping and rules of engagement of our penetration testing regime

🎯 Requirements

• 5+ years of web application development (.net, python, java, etc.) • Secure SDLC (Software Development Life Cycle), DAST (Dynamic Application Security Testing), and SAST (Static Application Security Testing) experience • Demonstrated understanding of web application penetration testing, secure coding and source code analysis • Strong, professional communication skills that maintain under pressure

🏖️ Benefits

• Flexible work arrangements • Professional development opportunities