Senior Application Security (AppSec) Engineer

Job Description

• Build, deploy, and maintain software security tools and automation.
• Help monitor, audit, and vet our core frameworks and standards.
• Work with the Security manager to create threat models for our existing software.
• Configuring, monitoring and maintaining our static code analysis software.
• Perform security testing and code reviews to improve our software security posture on all in-house software.
• Work with to troubleshoot, debug, fix security findings from both testing, and code analysis tools.
• Help guide our software security standards, and secure coding practices.
• Work with our Security manager, architects and senior developers to design, and promote secure and reliable software systems and code.

• 5 years experience with java.
• 3 years experience with javascript.
• Minimum of 3 years of application security experience.
• Experience finding vulnerabilities, and bugs in web application.
• Strong technical knowledge of software security best practices, and technical implementations of them.
• Experience implementing, and designing secure software architectures, specifically AAA and identity access.
• Experience mitigating known security risks when they arise.
• Experience securing SAAS, web, and mobile applications.

• Experience with Spring/Sprint Boot, Maven, .NET, Ruby on Rails.
• Functional knowledge of OWASP tools strongly preferred.
• Experience with dynamic code analysis tools. (Burpesuite, ZAP, NetSparker, Nikto, Arachni)
• Previous CTF experience
• Interest in all aspects of security research and development