Engineer, Application Security

Join to apply for the Engineer, Application Security role at ICE

1 day ago Be among the first 25 applicants

Join to apply for the Engineer, Application Security role at ICE

Job Purpose

An ICE IS AppSec Engineer is part of a team responsible for ensuring that ICE produces and maintains secure applications. The team member influences secure design, performs code analysis, identifies vulnerabilities through hands-on penetration testing, assists developers in remediation efforts, and communicates findings to developers, QA teams and management.

Overview

Job Purpose

An ICE IS AppSec Engineer is part of a team responsible for ensuring that ICE produces and maintains secure applications. The team member influences secure design, performs code analysis, identifies vulnerabilities through hands-on penetration testing, assists developers in remediation efforts, and communicates findings to developers, QA teams and management.

Responsibilities

• Application Identification and Review - Operates the Application Development Security Lifecycle from design review through automated and hands-on testing.
• Standards and Policies - Maintains and contributes to Application Development Security Policies and standards by keeping up with industry trends and publications from organizations such as NIST, OWASP, and SANS.
• Secure Design - Works with development teams to establish security requirements early in the SDLC and contributes security subject matter expertise during the development of new projects and releases.
• Tool Management - Focuses on automation while implementing, maintaining and integrating cutting-edge technologies to assess an applications security with static code analyzers (SAST), dynamic testing (DAST) tools, software composition scanners, Web Application Firewall (WAF) and bug bounty programs.
• Developer Education - Keeps software engineers apprised of secure coding practices and builds strong rapport and respect with the ICE application development community via training sessions, one-on-one education, Intranet blogs and other opportunities.

Desirable Knowledge And Experience

Analyst, Engineer, and Sr. Engineer Distinction

Seniority is determined by experience and demonstration of exceptional competencies including :

Seniority level

Seniority level

Not Applicable

Employment type

Employment type

Full-time

Job function

Job function

Information Technology

Referrals increase your chances of interviewing at ICE by 2x

Sign in to set job alerts for Application Security Engineer roles.

Associate Cybersecurity Engineer - Netskope - Remote

Senior Backend Engineer (Content, Security & Trust)

Were unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

#J-18808-Ljbffr