Application Security Engineer III

Geographic Solutions - Palm Harbor, FL

Full-time - Mid Level

Palm Harbor, FL

Professional, Scientific, and Technical Services

About the position

The Application Security Engineer III plays a critical role in supporting the Chief Information Security Officer and the Application Security Team Lead in managing the organization's information security efforts. This position involves identifying and mitigating security threats, ensuring compliance with industry standards, and providing expertise in security best practices. The engineer will also be responsible for coordinating security documentation, remediation planning, and risk management to meet audit and compliance requirements.

Responsibilities

• Assist the Chief Information Security Officer in leading and managing information security initiatives.
• Identify and report all security issues, prioritizing threats and confirming mitigation.
• Proficiency in configuration and optimization of information security tools such as Crowdstrike, Cisco FTD, and others.
• Understand and exploit vulnerabilities in the OWASP top 10.
• Conduct attack and penetration testing of Internet infrastructure and web applications.
• Architect and design new security tools and SOPs for the SECOPS team.
• Perform network traffic forensic analysis to isolate malicious behavior.
• Implement preventative measures on intrusion detection systems.
• Manage multiple competing priorities in a fast-paced SaaS environment.
• Evaluate and manage third-party security services and application vendors.

Requirements

• 5 or more years of experience in database environments such as Microsoft SQL Server, Oracle, Sybase, DB2, and MySQL.
• CISSP, CISM, OSCP, CEH and/or Security+/Network+ Certifications.
• 5 or more years of hands-on experience with Windows Server and Linux operating systems.
• 5 years practical experience in TCP/IP Networking.
• 5 years experience managing small tactical teams.
• 5 years or more experience with private or public cloud security.
• 2 or more years designing, architecting, and engineering security solutions.
• Knowledge of industry standards such as ISO 17799/27001, NIST Publications, and regulations like GLBA and PCI.

Nice-to-haves

• Experience with agile and waterfall software development lifecycle methodologies.
• Consulting experience in Information Security.
• Active participation in Enterprise-level Risk Assessment and Business Impact Analysis.

Benefits

• Equal Opportunity Employer. M/F/D/V