Senior Application Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Jobandtalent

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2009

🎯 Recruiter

👥 HR Tech

🏪 Marketplace

💰 $250M Debt Financing on 2022-05

Recruitment • HR Tech • Marketplace

Jobandtalent is an innovative platform that connects job seekers with steady work opportunities at over 2,500 companies. The platform simplifies the job search process by eliminating the need for resumes, allowing job seekers to find and get hired for jobs quickly and easily through their app. For companies, Jobandtalent offers access to reliable and trusted workers ready to start on-site within hours, leveraging a powerful technology platform. The company focuses on making the hiring process efficient and hassle-free for both job seekers and employers.

📋 Description

• Act as the Application Security Subject Matter Expert, partnering with Engineering and Product teams to embed security throughout the SDLC • Lead application security reviews, threat modelling, code reviews and penetration testing • Design, implement and automate security controls across CI/CD pipelines, including SAST, SCA and other AppSec tooling • Drive the technical roadmap of the Application Security program • Improve and manage application security controls, including WAF, Kubernetes security and vulnerability management • Mentor Security Champions and junior engineers • Define and communicate Application Security metrics to measure risk reduction and program effectiveness

🎯 Requirements

• 3–4 years of experience in Information Security, including at least 2 years in Application Security • Strong experience with Secure SDLC, threat modelling, application security reviews and secure code reviews • Hands-on experience with SAST, SCA and automated security testing integrated into CI/CD pipelines • Strong knowledge of OWASP Top 10, OWASP ASVS, API Security and secure coding best practices • Experience implementing and managing WAF solutions • Experience conducting internal penetration testing, including APIs using Burp Suite • Solid understanding of Kubernetes security, cloud-native applications and networking fundamentals (HTTP, HTTPS, TCP/IP) • Basic scripting or development experience, preferably in Python • Excellent communication skills and ability to influence technical and non-technical stakeholders

🏖️ Benefits

• Competitive pay • Meaningful benefits • Equal Opportunity Employer