Description

Job Responsibilities:

  • Work independently with application developers, system/network administrators, product owners, and other colleagues to ensure secure design, development, and implementation of applications and networks.
  • Perform security architecture design reviews of Client developed applications
  • Perform code analysis of large applications, manually and using static application security testing (SAST) and dynamic application security testing (DAST) scanning solutions as well as conducting manual vulnerability analysis.
  • Provide remediation guidance and recommendations to developers and administrators.
  • Work with Application Development teams to help prioritize and validate urgency of mitigation of identified product vulnerabilities and security feature enhancement requests
  • Create security best practices and standards and ensure Application Development teams understand them and receive  pertinent annual secure coding training

Skills Needed:

  • 10+ years of demonstrated industry experience with application development, leadership and application security work
  • Proficiency in reading, writing, and auditing Python, JavaScript, Angular, PL/SQL, Oracle Apex low-code and the ability  to pick up new languages/technologies
  • Authoritative knowledge of OWASP
  • Strong familiarity with common vulnerabilities and attack vectors
  • Knowledge of web service technologies, load balancer services (i.e.Cloudflare, F5, etc.) and RESTful APIsKnowledge of ubiquitous encryption technologies (PGP, SSH, SSL, et........c.) and common authentication protocols (OAUTH, SAML, LDAP, etc.)
  • Solid understanding of secure network and system design in both cloud (AWS) and conventional environments
  • The ability to communicate complicated technical issues and the risks they pose to developers, network engineers, system administrators, and management

Education

Any Graduate