Application Security Engineer - Remote

$110,000 - $130,000/Yr

Ryder - Cheyenne, WY

Full-time - Mid Level

Remote - Cheyenne, WY

Rental and Leasing Services

About the position

The Application Security Engineer will play a critical role in ensuring the security and privacy of the company's applications and data. This highly technical position requires a solid understanding of security engineering, secure coding practices, and the software development lifecycle (SDLC). The engineer will conduct security assessments, collaborate with development teams, and implement secure software practices to mitigate vulnerabilities and enhance the organization's security posture.

Responsibilities

• Conduct security assessments using SAST and DAST methodologies.
• Collaborate with software development teams to integrate security into the development life cycle.
• Analyze security assessment results to identify vulnerabilities and provide remediation guidance.
• Design and implement secure software development practices, including threat modeling and secure coding standards.
• Stay current with security threats and recommend new security controls as needed.
• Conduct application security investigations and provide risk mitigation recommendations.
• Maintain security documentation and collaborate on security policies and standards.

Requirements

• Bachelor's degree in computer science, information security, or a related field.
• Five years or more experience with OWASP, SAST, DAST, SCA, RASP, and common security tools.
• Seven years or more in application security, security engineering, or software development.
• Five years or more understanding of web application security and common attack vectors.
• Five years or more experience with secure coding practices and SDLC methodologies.
• Five years or more experience in diagnosing and resolving complex issues.
• Five years or more experience with systems integration processes and tools.
• Seven years or more development and scripting experience.
• Five years or more in a professional application security role.
• Five years or more experience with API and Web Security.
• Three years or more experience with WAF or similar application security infrastructure (preferred).
• Seven years or more experience in integrating security in CI/CD and DevOps.
• Six years or more experience in process or operation management.
• Six years or more experience in process improvement methodologies.

Nice-to-haves

• Experience with WAF or similar application security infrastructure.
• Familiarity with NIST framework, PCI, ISO 27001, SOC, SOX, CCPA, GDPR and global regulations.

Benefits

• Comprehensive health and welfare benefits including medical, prescription, dental, vision, life insurance, and disability insurance options.
• Paid time off for vacation, illness, bereavement, family and parental leave.
• Tax-advantaged 401(k) retirement savings plan.