Application Security Engineer

EssilorLuxottica - Mason, OH

Full-time - Mid Level

Mason, OH

About the position

The Security Engineer (Developer) position at EyeMed is a critical role within the IT team, focusing on the analysis, design, development, and maintenance of applications aimed at resolving security issues. This position is integral to the company's overall software security strategy, ensuring that security is embedded throughout the software development lifecycle. The Developer will work collaboratively with a diverse team, employing both Agile and Waterfall methodologies to deliver secure software solutions. In this role, the Security Engineer will be responsible for specific development tasks that adhere to best practices and utilize strong analytical skills. This includes creating detailed designs based on requirements, building solutions from these designs, and validating the solutions through both manual and automated unit testing. The position requires a proactive approach to security, contributing to security analysis, defenses, and countermeasures at each phase of the software development lifecycle to ensure the delivery of robust and reliable software. Additionally, the Security Engineer will plan and coordinate Application Development Security training, act as a liaison between EyeMed IT and the IT Security team, and maintain the Application Development Secure Coding Development Standard. Staying current on IT Security Industry Best Practices is essential, as is the ability to review code to enhance software security. The role also involves troubleshooting and debugging issues, as well as preparing and maintaining technical documentation to support the development process.

Responsibilities

• Contribute in security analysis defenses and countermeasures at each phase of the software development lifecycle to result in robust and reliable software
• Responsible for planning and coordinating Application Development Security training
• Liaison between EyeMed IT and the IT Security team
• Creates and maintains the Application Development Secure Coding Development Standard
• Stays current on IT Security Industry Best Practices
• Review code to improve software security
• Plan, test, and implement advanced software security techniques in compliance with technical reference architecture
• Troubleshoot and debug issues that arise
• Prepare and maintain technical documentation

Requirements

• Bachelor's degree in computer science or related field
• 3 to 5 years of experience in software development environments (JavaScript, Vue JS, .NET, C/C++, Java)
• In-depth knowledge of various web-related technologies (such as Web applications, services, architectures etc.)
• Solid experience with techniques standards and methods for authentication and authorization, applied cryptography, security vulnerabilities, and remediation
• Able to articulate, plan, implement, and manage software security best practices
• Excellent communication, innovation, critical thinking, problem-solving, planning, prioritization, project management, teamwork, and organization skills
• Conflict management and resolution skills
• Strong analytical skills
• Code Management leveraging GitHub or equivalent
• Expertise in developing web-based enterprise applications using core Java, JMS, JDBC, Web Services, Spring Framework, SQL, and Object-Oriented Programming techniques
• Expertise in working with RDBMS such as MySQL, MS SQL Server, DB2, Oracle, and JDBC API for connection and access to databases
• Strong understanding of Authentication Protocols and industry best practices (SAML 2.0, OAuth, Open ID)

Nice-to-haves

• Experience in healthcare / insurance industry
• Works well under high pressure / critical situations
• Flexibility to work non-business hours to meet critical business needs

Benefits

• Health care
• Retirement savings
• Paid time off/vacation
• Various employee discounts