Application Security Engineer, Information Security

🔥 12 hours ago

🐊 Florida, New Jersey, +1 more states – Remote

🐊 Florida – Remote 🏖️ New Jersey – Remote 🔔 Pennsylvania – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Ascensus

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2000

💼 Consulting

🛡️ Insurance

💸 Finance

💰 Secondary Market on 2019-02

Consulting • Insurance • Finance

Ascensus is a company that values its people and emphasizes a culture guided by principles such as integrity, quality, and a commitment to high standards. It provides administrative and recordkeeping services, focusing on helping individuals achieve financially secure retirements and ensuring quality education for children. Ascensus is dedicated to diversity, inclusion, and providing equal opportunities, making it a rewarding place to work. The company also offers a wide range of benefits to its employees, including student loan refinancing and healthy living programs.

📋 Description

• Serve as the primary resource for Ascensus’s application security program • Protect, secure, and properly handle confidential Ascensus data • Develop a comprehensive, agile, and innovative DevSecOps approach across the software development lifecycle • Provide security consultation to scrum teams, application owners, and technology teams on security controls and secure SDLC processes • Participate in sprint planning and decision-making sessions to embed security requirements into development practices • Conduct application security analysis, including architecture reviews, data-flow analysis, penetration-testing support, and threat modeling • Build and monitor compliance with application security policies, coding standards, and security controls • Deploy and integrate services supporting SAST, DAST, and SCA functions • Assist development teams with static and dynamic testing, triage findings, and provide remediation guidance • Act as a trusted application security advisor and subject matter expert in secure development practices • Perform other assigned tasks and projects

🎯 Requirements

• Minimum of 4 years’ experience in Secure Software Development and/or DevSecOps (preferred) • Ability to define software security and privacy requirements • Solid understanding of threat modeling, risk, and mitigation from internal and external threats • Experience developing system security architecture diagrams and security architecture specifications according to security architecture standards • Experience performing software security design reviews • Experience integrating security testing tools into CI/CD pipelines, including SAST, DAST, and SCA • Experience with application testing tools such as Burp Suite, Fiddler, ZAP, Wireshark, and Metasploit • Experience configuring WAF, API Gateway, and API security tools • Solid understanding of OWASP Top 10 and SANS/CWE Top 25 • Solid understanding of application, database, and network vulnerability testing principles • Working knowledge of Microsoft SDL, OWASP SAMM, or BSIMM • Experience assessing secure adoption of third-party components, including open-source or commercial software • Understanding of information security frameworks such as ISO 27001, NIST, and CSA • Experience operating in environments regulated against FFIEC, SEC, and/or HIPAA requirements • Solid understanding of authentication and authorization systems • Solid understanding of cryptographic standards, including encryption, hashing, key management, and digital signatures • Ability to provide vulnerability remediation guidance and mentoring to product development software engineers • Ability to translate security risks into business impact • Experience running or managing vulnerability assessments with automated tools such as Nessus and Qualys • Experience managing penetration testing engagements • Understanding of privacy regulations relating to information handling and protection • Experience with fraud detection and analysis for custom-developed applications • Experience implementing cloud security controls following CSA or CSP best practices, including Azure and AWS • Experience implementing and supporting security automation tools, including Kubernetes and CSP platform configuration, hardening, and monitoring • .NET/Java experience is a plus

🏖️ Benefits

• Equal Opportunity Employer • Employer will never ask applicants for payment or require them to purchase equipment