How Remoteville checks and expires listings
Application Security Engineer
Skills
C#JavaJavascriptSQLApplication SecurityCybersecurity ToolsQualys
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- 5+ years' experience as an Application Security Engineer using technologies such as Qualys WAS, Wiz, Javascript, C#.NET/Java
- Strong static analysis tools (SAST) to secure applications including Veracode, Fortify, SonarQube and Checkmarx
- Must have solid experience in dynamic security testing (DAST) and how to integrate security tools within the CI/CD pipeline
- Experience mitigating SQL injection vulnerabilities
- Strong experience on how to secure a RESTful API
- Ability to analyze risks associated with vulnerabilities and recommend appropriate resolutions or risk reduction strategies
- Must work effectively as a supportive team member within the InfoSec team and act as a security ambassador to the wider organization
- Proficient in collecting and synthesizing information in a format suitable for audits. Attention to detail is essential for maintaining accurate documentation
Day to day
- Provide guidance and assistance to development personnel in understanding security vulnerabilities and remediation options
- Collaborate with developers to ensure adherence to security best practices during development cycles
- Utilize SAST and DAST tools for thorough security testing and validation of remediation efforts
- Recommend efficient solutions for fixes to streamline the remediation process
- Assist in building out the capabilities of a DevSecOps Team, contributing to integrating security practices into CI/CD pipelines
- Automate existing manual processes to improve the efficiency of development workflows
- Analyze findings from penetration tests and propose remediation tasks
- Support assigned teams with technical aspects of the remediation process
- Monitor and track progress on remediation tasks to ensure completion