Application Security Engineer III

Description

Job Summary : Assist the Chief Information Security Officer in leading and managing the Information in accordance with organizational policies and goals. The candidate will assist the Chief Information Security Officer and the Application Security Team Lead in processing documentation, facilitation, remediation planning, risk management, and systems implementation coordination to meet the audit, control, and compliance requirements.

The Application Security Engineer III will be responsible for identifying and reporting all security issues, prioritizing threats, and confirming threats have been mitigated in accordance with company standards. The Application Security Engineer III will be a resource of experience and best practices for the Information Security Team.

Viable candidates must be willing to work onsite at GSI's headquarters in Palm Harbor, Florida daily.

Key Responsibilities :

• Proficiency in configuration, optimization, and utilization of information security tools such as Crowdstrike or similar EDR, Cisco FTD, Palo Alto, Qualys, HP Fortify, Nessus, Kismet, Airsnort, NMAP, Wireshark, WebInspect, SNORT, Security Onion, and Nikto, Burp Suite, Kali Linux, and other web application penetration testing tools.
• Sound understanding of manual techniques to exploit vulnerabilities in the Open Web Application Security Project (OWASP) top 10, including but not limited to cross-site scripting, SQL injections, session hijacking, and buffer overflows to obtain controlled access to target systems.
• Attack and Penetration experience in testing Internet infrastructure and Web-based applications utilizing manual and automated tools.
• Architect and design new tools to include SOPs and Diagrams for the SECOPS team and Security and Network operations team.
• Proficiency in static and dynamic scanning methodologies.
• Expert ability to perform network traffic forensic analysis, utilizing packet capturing software, to isolate malicious network behavior, inappropriate network use, or identification of insecure network protocols.
• Ability to perform general inspection and implement preventative measures on intrusion detection systems.
• Assist in managing multiple competing priorities in a fast-paced SaaS environment.
• Assist in managing third-party security services, application vendors, evaluate new vendors and services.

Requirements

Work Experience / Knowledge :

Qualifications / Certifications :

Special Requirements :

Equal Opportunity Employer. M / F / D / V

#J-18808-Ljbffr