Application Security Engineer

Job Description:

Application Security Engineer

Should have a strong proficiency in at least one of the following areas

1. Application Security Testing particularly with BurpSuite and/or ZAP; additional toolsets are expected, but highly dependent on the engineer’s experience
   1. Web application security engineers must have line a. from the additional hardskill requirements below
2. DevSecOps practices (Hands on keyboard experience integrating security linting tools, SAST, or DAST into CI pipelines)
   1. This area must be accompanied by some in depth knowledge of a language (c++, or JS / NodeJS, or Python), as well as line b from the additional hardskill requirements below
3. Cloud Security Posture Management engineering experience implementing automated solutions behind cloud resource security (e.g. designing and implementing a honeypot resulting in automation automatically blocking ingress traffic from malicious traffic).

Peripheral hard skill requirements

1. Strong understanding of AWS Cloud Technologies and Solutions
2. Strong understanding of vulnerabilities and the assessment thereof
3. Strong understanding of the Software Development Lifecycle (SDLC)
4. Ability to explain vulnerabilities in Engineering language, or Laman’s terms dependent on audience