Application Security Engineer - Remote

$110,000 - $130,000/Yr

Ryder - Albany, NY

Full-time - Mid Level

Remote - Albany, NY

Rental and Leasing Services

About the position

The Application Security Engineer at Ryder System is a highly technical role focused on ensuring the security and privacy of the company's applications and data throughout the software development lifecycle (SDLC). The engineer will conduct security assessments, collaborate with development teams, and implement secure coding practices while staying updated on the latest security trends and technologies.

Responsibilities

• Conduct security assessments using SAST and DAST methodologies.
• Collaborate with software development teams to integrate security into the development life cycle.
• Analyze security assessment results to identify vulnerabilities and provide remediation guidance.
• Design and implement secure software development practices, including threat modeling and secure coding standards.
• Stay current with security threats and recommend new security controls as needed.
• Conduct application security investigations and provide risk mitigation recommendations.
• Maintain security documentation and collaborate on security policies and standards.

Requirements

• Bachelor's degree in computer science, information security, or a related field.
• Five years or more experience with OWASP, SAST, DAST, SCA, RASP, and common security tools.
• Seven years or more in application security, security engineering, or software development.
• Five years or more understanding of web application security and common attack vectors.
• Five years or more experience with secure coding practices and SDLC methodologies.
• Five years or more experience in diagnosing and resolving complex issues.
• Five years or more experience with systems integration processes and tools.
• Seven years or more development and scripting experience.
• Five years or more experience with API and Web Security.
• Three years or more experience with WAF or similar application security infrastructure (preferred).
• Seven years or more experience in integrating security in CI/CD and DevOps.
• Six years or more experience in process or operation management.

Nice-to-haves

• Experience with WAF or similar application security infrastructure.
• Familiarity with NIST framework, PCI, ISO 27001, SOC, SOX, CCPA, GDPR and global regulations.

Benefits

• Comprehensive health and welfare benefits including medical, prescription, dental, vision, life insurance, and disability insurance options.
• Paid time off for vacation, illness, bereavement, family and parental leave.
• Tax-advantaged 401(k) retirement savings plan.