This job is closed
We regret to inform you that the job you were interested in has been closed. Although this specific position is no longer available, we encourage you to continue exploring other opportunities on our job board.
Application Security Engineer - Remote
Ryder - Augusta, ME
posted 2 months ago
About the position
The Application Security Engineer at Ryder System is a highly technical role focused on ensuring the security and privacy of the company's applications and data throughout the software development lifecycle (SDLC). This position involves conducting security assessments, collaborating with development teams, and implementing secure coding practices to mitigate vulnerabilities. The ideal candidate will have a strong background in application security, coding, and security engineering, along with the ability to stay updated on the latest security trends and technologies.
Responsibilities
- Conduct security assessments using SAST and DAST methodologies.
- Collaborate with software development teams to integrate security into the development life cycle.
- Analyze security assessment results to identify vulnerabilities and provide remediation guidance.
- Design and implement secure software development practices, including threat modeling and secure coding standards.
- Stay current with security threats and recommend new security controls as needed.
- Conduct application security investigations and provide risk mitigation recommendations.
- Maintain security documentation and collaborate on security policies and standards.
Requirements
- Bachelor's degree in computer science, information security, or a related field.
- Five years of experience with OWASP, SAST, DAST, SCA, RASP, and common security tools.
- Seven years of experience in application security, security engineering, or software development.
- Five years of understanding web application security and common attack vectors.
- Five years of experience with secure coding practices and SDLC methodologies.
- Five years of experience in diagnosing and resolving complex issues.
- Five years of experience with systems integration processes and tools.
- Seven years of development and scripting experience.
- Five years of experience with API and Web Security.
- Three years of experience with WAF or similar application security infrastructure (preferred).
- Seven years of experience in integrating security in CI/CD and DevOps.
- Six years of experience in process or operation management.
Nice-to-haves
- Experience with WAF or similar application security infrastructure.
- Familiarity with NIST framework, PCI, ISO 27001, SOC, SOX, CCPA, GDPR.
Benefits
- Comprehensive health and welfare benefits including medical, dental, vision, life insurance, and disability insurance.
- Paid time off for vacation, illness, bereavement, family and parental leave.
- Tax-advantaged 401(k) retirement savings plan.
