Application Security Engineer - Remote

$110,000 - $130,000/Yr

Ryder - Charleston, WV

Full-time - Mid Level

Remote - Charleston, WV

Rental and Leasing Services

About the position

The Application Security Engineer plays a critical role in ensuring the security and privacy of the company's applications and data. This highly technical position involves conducting security assessments, integrating security into the software development lifecycle (SDLC), and collaborating with development teams to implement secure coding practices. The engineer will stay updated on security trends and technologies, providing guidance on best practices and addressing vulnerabilities in applications.

Responsibilities

• Conduct security assessments using SAST and DAST methodologies.
• Collaborate with software development teams to integrate security into the development life cycle.
• Analyze security assessment results to identify vulnerabilities and provide remediation guidance.
• Design and implement secure software development practices, including threat modeling and secure coding standards.
• Stay current with security threats and recommend new security controls as needed.
• Conduct application security investigations and provide risk mitigation recommendations.
• Maintain security documentation and collaborate on security policies and standards.

Requirements

• Bachelor's degree in computer science, information security, or a related field.
• Five years or more experience with OWASP, SAST, DAST, SCA, RASP, and common security tools.
• Seven years or more in application security, security engineering, or software development.
• Five years or more understanding of web application security and common attack vectors.
• Five years or more experience with secure coding practices and SDLC methodologies.
• Five years or more experience in diagnosing and resolving complex issues.
• Five years or more experience with systems integration processes and tools.
• Seven years or more development and scripting experience.
• Five years or more in a professional application security role.
• Five years or more experience with API and Web Security.
• Three years or more experience with WAF or similar application security infrastructure (preferred).
• Seven years or more experience in integrating security in CI/CD and DevOps.
• Six years or more experience in process or operation management.
• Six years or more experience in process improvement.

Nice-to-haves

• Experience with WAF or similar application security infrastructure.
• Familiarity with NIST framework, PCI, ISO 27001, SOC, SOX, CCPA, GDPR.

Benefits

• Comprehensive health and welfare benefits including medical, prescription, dental, vision, life insurance, and disability insurance options.
• Paid time off for vacation, illness, bereavement, family and parental leave.
• Tax-advantaged 401(k) retirement savings plan.