Talent.com
TEKsystems
Sr. Application Security Engineer - Work from homeTEKsystems • Clayton, NC, USA
Sr. Application Security Engineer - Work from home

Sr. Application Security Engineer - Work from home

TEKsystems • Clayton, NC, USA
30+ days ago
Job type
  • Full-time
  • Remote
Job description
  • Description : * What will this person do? This individual is accountable for identifying weaknesses in our security posture within the application or web space while defining methods to achieve security control requirements via automation or highly efficient means that further support timely delivery and minimal overhead. They work in a team of infrastructure specialists and engineers making sure services are delivered and used securely as required. Works with and supports third parties to provide security services. The Sr. Application Security Engineer will advise and enable development and technical teams to make security decisions and provide advice and guidance, ensuring the effective use of common tools and patterns *Best fit candidate will have a strong understanding of S-SDLC (Secure Software Development Life Cycle) process and implementation. Have a strong understanding of the OWASP top 10 Framework with Excellent communication skills to help guide / educate developers on creating code with security in mind in each phase of the SDLC. Responsibilities : Act as the point of contact for Application engineering and security. Participate in security code reviews, and automate penetration testing against products prior to move to production. Support engineering with implementing security fixes, ensuring security scanners are utilized correctly, and develop strategies to proactively secure their architecture. Review development frameworks for security functionality, consistency, and uplift opportunities. Create threat models and leverage them to prioritize time based on risk impact. Educate and train product teams. Evaluate client needs, coordinate design for a solution, and clearly communicate the value proposition of complex and highly technical subjects Implement and / or assess existing security controls Translates logical designs into physical designs. Produces detailed designs and documents all work using required standards, methods and tools, including prototyping tools where appropriate. Designs systems characterized by managed levels of risk, manageable business and technical complexity and meaningful impact. Works with well-understood technology and identifies appropriate patterns. Client Job Description : The Application Engineer, Cyber Security is responsible for building, managing and supporting information security that underpins all internal and external user technology services, according to security policies and best practices. The Application Engineer, Cyber Security has strong development experience in numerous programming languages and is the subject matter expert (SME) for concepts behind security controls and how they apply to application development, web presence and API services. This individual is accountable for identifying weaknesses in our security posture within the application or web space while defining methods to achieve security control requirements via automation or highly efficient means that further support timely delivery with minimal overhead. They work across internal and external teams of infrastructure specialists and software engineers making sure services are delivered and used securely as required, offering advice and guidance on security decisions and ensuring the effective use of common tools and patterns. The incumbent must have a service-oriented mentality, a high sense of ownership of the problems and requests assigned, a focus on managing and resolving issues in alignment with the SLAs, establishing and maintaining communication with technology customers to keep them updated with status of their requests, initiating and performing changes on production systems and proactively escalating any issues that cannot be resolved within the established timeframes. Additional insights, experience or background in any of the following are also of great value : NIST, ISO27001, Data Protection, Python Development, Static Code Analysis, Dynamic Code Analysis, Penetration Testing, Containers, MicroServices, CI / CD Pipeline, Agile, Git, Jira, Docker, Kubernetes, cloud security (AWS, Azure, GCP) and design, process maturity, and other related focuses. Primary Accountabilities : Technical (80%) - Be the security representative for multiple product lines and act as the point of contact for software engineering and security. - Perform architecture reviews to steer projects in the right direction, participate in security code reviews, and automate penetration testing against products prior to move to production. - Support software engineering with implementing security fixes, ensuring security scanners are utilized correctly, and develop strategies to proactively secure their architecture. - Review development frameworks for security functionality, consistency, and uplift opportunities. - Create threat models and leverage them to prioritize time based on risk impact. - Evaluate client needs, coordinate design for a solution, and clearly communicate the value proposition of complex and highly technical subjects. - Implement and / or assess existing security controls. - Translate logical designs into physical designs; produce detailed designs and document all work using required standards, methods and tools, including prototyping tools where appropriate. - Design systems characterized by managed levels of risk, manageable business and technical complexity and meaningful impact; works with well-understood technology and identifies appropriate patterns. Project Management (20%) - Work with application development teams to ensure secure software development lifecycle (S-SDLC) implementation and validation. - Educate and train product teams. - Evaluate client needs, coordinate design for a solution, and clearly communicate the value proposition of complex and highly technical cyber security subjects. Specific Technical Skills Needed : Security and Risk Assessment : - Aware of Security governance principles and able to apply them to the enterprise - Understands the legal and regulatory Issues relevant to the enterprise and does not place the enterprise at risk. Security Engineering : - Working knowledge of secure design principles - Working knowledge of database security - Working knowledge of cloud computing - Working knowledge of Cryptography Identity and Access Management : - Physical and logical access - LDAP - Multi-factor authentication - Session management - Credential management Software Development Security : - Working knowledge of software development lifecycles - Working knowledge of what software development methodologies are used in the enterprise and can explain what it means - Familiar with DevOps concepts - Working knowledge of security vulnerabilities and understands how the following work : Bounds checking, Input / output validation, Buffer overflow, Privilege escalation - Working knowledge of secure coding practices - Working knowledge of code repositories Individual Competencies : - Integrity : Gains the trust of others by taking responsibility for own actions and telling the truth. - Teamwork : Builds relationships and works cooperatively with others, inside and outside the organization, to accomplish objectives to build and maintain mutually-beneficial partnerships, leverage information and achieve results. - Adaptable : Responds to change with a willingness to learn new ways to accomplish work objectives with a positive attitude. Innovative : Ability to develop, sponsor, or support the introduction of new and improved methods, products, procedures or technologies. - Curious : A desire to inquire and learn, to seek new knowledge and wisdom, and to listen to the contributions of others with a genuine interest to better self, the team, and the organization. - Analytical and Critical Thinking : Ability to tackle a problem by using a logical, systematic, sequential approach. - Problem Solving : Gathers and analyzes information to generate and evaluate potential solutions to problems, issues and challenges while weighing the accuracy and relevance of the facts, data and information. *Skills : * Applications Security, S-SDLC, SDLC, OWASP Top 10, Developer, Cloud, Information security, Code Review, Threat Modeling, owasp, Application security, Security architecture, Vulnerability, code deployment *Top Skills Details : * Applications Security,S-SDLC,SDLC,OWASP Top 10,Developer,Cloud,Information security,Code Review,Threat Modeling *Additional Skills & Qualifications : * Required Qualifications : Bachelor’s degree in Computer Science, Information Technology or related field 8-10 years of related work experience with application security, e.g. DAST, SAST, SCA, cloud security Or any equivalent combination of experience and training / certification that provides the required knowledge, skills, and abilities needed to complete the major responsibilities / essential functions of the position Certifications preferred. OSCP, CISSP, GCIH, GXPN, GPEN Working experience in web and mobile application security Working experience in distributed platform development security and design In-depth knowledge of web and mobile security standards and best practices (OWASP, etc.) Strong foundation in core information security principles and concepts (HTTPS, TLS, OAuth, etc.) Working experience with industry tools and technologies such as Burp, Metasploit, etc. Working knowledge of common languages *Experience Level : * Expert Level About TEKsystems : We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company. The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.
Create a job alert for this search

Sr. Application Security Engineer - Work from home • Clayton, NC, USA

Similar jobs

R&D Design Engineer

Synerfac Technical StaffingWendell, NC, US
Full-time

R&D Design Engineer - Power Distribution Equipment Location: Wendell, NC (Hybrid - 3 days onsite/week) Our client is hiring an R&D Design Engineer to design and refine switch devices, switchgear, a... Show more

 • Promoted

Security & Law Enforcement (Master-at-Arms)

US NavyYoungsville, NC, US
Full-time

Security & Law Enforcement (Master-at-Arms).This role is open to both entry-level applicants and candidates with prior experience.Those with a background in Law Enforcement, Corrections/Parole, or ... Show more

 • Promoted

Extra Income Online – Remote Survey Taker Job Up to $25 Per Survey

Earn HausClayton, NC, US
Remote
Full-time +1

We are urgently looking for people interested in taking online surveys for Fortune 500 brands.If you are a self-starter, looking for flexible hours throughout the week, this may be for you! Earn up... Show more

 • Promoted

Dedicated Costco Freight Earning up to $75,087 /$.55 to $.58 cpm - Newton Grove, NC

Crete CarrierNewton Grove, NC, US
Full-time

Crete Carrier offers a dedicated weekly home time Hauling for Costco.Top 50% average $75,087 per year.One-year verifiable tractor trailer experience with a class A CDL. Show more

 • Promoted

Border Patrol Agent (BPA) Experienced - New Hire Sign-On and Retention Incentives

U.S. Customs and Border ProtectionFour Oaks, NC, US
Full-time

Border Patrol Agent (BPA) – in the Federal Security and Public Safety Sector Experienced (GL-9 GS-11).You love protecting your community and doing your part to keep our nation safe.But maybe you’re... Show more

 • Promoted

Earn Side Money at Home Testing Products

Product Review JobsFOUR OAKS, NC, United States
Full-time

Compensation: Varies per assignment.Location: Remote (USA) Company: ProductReviewJobs Thank you for your interest in becoming a Paid Product Tester.This opportunity is for completing market res... Show more

 • Promoted

Travel Nurse RN - Emergency Room (ER) / Trauma - $1,581 per week in Louisburg, NC

TravelNurseSourceLouisburg, NC, US
$1,581.00 weekly
Full-time

Registered Nurse (RN) | Emergency Room (ER) / Trauma.TravelNurseSource is working with FlexCare to find a qualified ER/Trauma RN in Louisburg, North Carolina, 27549!.Certs & Licenses BLS, ACLS,... Show more

 • Promoted

Travel Nurse RN - Psych - $1,496 to $1,591 per week in Louisburg, NC

TravelNurseSourceLouisburg, NC, US
$1,496.00 weekly
Full-time

TravelNurseSource is working with Fusion Medical Staffing to find a qualified Psych RN in Louisburg, North Carolina, 27549!.Facility in Louisburg, North Carolina.Fusion Medical Staffing is seeking ... Show more

 • Promoted

13J Fire Control Specialist

Army National GuardLouisburg, NC
Part-time

JOINT Automated Systems are tools that help provide strategic coordination and situational awareness at the tactical levels of combat.As a Fire Control Specialist, your primary responsibility will ... Show more

 • Promoted

Application Engineering Manager - Power Systems

SiemensWendell, NC, United States
Permanent

Application Engineering Manager - Power Systems.Application Engineering Manager Power Systems.Here at Siemens, we take pride in enabling sustainable progress through technology.We do this through ... Show more

 • Promoted

Dedicated Costco Freight Earning up to $75,087 /$.55 to $.58 cpm - Pilot Mt, NC

Crete CarrierPilot, NC, US
Full-time

Crete Carrier offers a dedicated weekly home time Hauling for Costco.Top 50% average $75,087 per year.One-year verifiable tractor trailer experience with a class A CDL. Show more

 • Promoted

Entry Level AI & Machine Learning Engineer

SynergisticITClayton, NC, US
Full-time

Recent CS Graduate — Stop Applying Randomly and Start Building a Strategy A computer science degree is valuable, but many recent graduates discover that a degree alone does not automatically lead t... Show more

 • Promoted

Sr IT Compliance Analyst

Novo NordiskClayton, NC, United States
Full-time

Facility: Digital & IT Location: Clayton, NC, US.At Novo Nordisk, we are helping to improve the quality of life for millions of people worldwide.For more than 100 years, we have led the way in diab... Show more

 • Promoted

A Calling Like No Other

U.S. Marine CorpsPeacocks Crossroads, NC, US
Full-time

Those who put others before themselves.Who can rise up in the face of danger.This country we call home has been our haven of safety for 250 years.And it's up to us to keep it that way.There's a goo... Show more

 • Promoted

Remote Data Entry & Survey Job – Earn Extra Income Online, Up to $25 Per Survey

Earn HausClayton, NC, US
Remote
Full-time +1

We are urgently looking for people interested in taking online surveys for Fortune 500 brands.If you are a self-starter, looking for flexible hours throughout the week, this may be for you! Earn up... Show more

 • Promoted

Production Control Specialist

Accentuate StaffingYoungsville, NC, US
Full-time

Accentuate Staffing has partnered with a growing manufacturing organization that is seeking a Production Control Specialist to join its operations team.This role plays an important part in supporti... Show more

 • Promoted

Medical Billing and Coding - Entry Level Training Program

Dreambound Inc.Rolesville, North Carolina, US
Full-time

Note : This is an educational program, not a job.Successful completion of the program does not guarantee employment but will equip you with valuable skills for the healthcare job market.Looking to ... Show more

 • Promoted

Transportation Security Officer (TSO) - PT or FT

TSAClayton, NC, United States
Full-time

Come join the TSA to serve in a high-stakes environment to safeguard the American way of life.No matter what your background or level of education, TSA has opportunities for a wide range of new can... Show more

 • Promoted

Travel Nurse RN - Emergency Room (ER) / Trauma in Louisburg, NC

TravelNurseSourceLouisburg, NC, US
$47.45 hourly
Full-time

Registered Nurse (RN) | Emergency Room (ER) / Trauma.Competitive weekly pay (inquire for details) .TravelNurseSource is working with SkyBridge Healthcare to find a qualified ER/Trauma RN in Louisbu... Show more

 • Promoted

Paid Product Tester

Product Review JobsFOUR OAKS, NC, United States
Full-time

Compensation: Varies per assignment.Location: Remote (USA) Company: ProductReviewJobs Thank you for your interest in becoming a Paid Product Tester.This opportunity is for completing market res... Show more