conduct security assessments using both Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) methodologies
collaborate with software development teams to integrate security into the development life cycle
conduct security assessments of web, mobile, and other applications
analyze security assessment results to identify vulnerabilities and provide guidance on remediation
design and implement secure software development practices, including threat modeling and secure coding standards
stay current with security threats, trends, and technologies
conduct application security investigations and provide recommendations to mitigate risk
maintain security documentation

Bachelor's degree in computer science, information security, or a related field
Five (5) years or more experience with OWASP, SAST, DAST, SCA, RASP and common security tools
Seven (7) years or more application security, security engineering, software development, or a related field
Five (5) years or more strong understanding of web application security and common attack vectors
Five (5) years or more experience with secure coding practices, threat modeling, and secure software development life cycle (SDLC) methodologies
Five (5) years or more proven experience in diagnosing, isolating, resolving complex issues
Five (5) years or more demonstrated experience with systems integration processes, methodology and tools
Seven (7) years or more development and scripting experience
Five (5) years or more professional application security role
Five (5) years or more experience with API and Web Security
Three (3) years or more experience with WAF, or similar application security infrastructure a plus

comprehensive health and welfare benefits
medical, prescription, dental, vision, life insurance and disability insurance options
paid time off for vacation, illness, bereavement, family and parental leave
tax-advantaged 401(k) retirement savings plan

Application Security Engineer

Key skills