APPLICATION SECURITY ENGINEER

$120,000 - $150,000/Yr

Industrial Electric Mfg - Jacksonville, FL

Full-time

Jacksonville, FL

Professional, Scientific, and Technical Services

About the position

The Application Security Engineer will play a vital role in safeguarding software products by identifying and mitigating security vulnerabilities throughout the software lifecycle. This position involves close collaboration with development teams to implement secure coding practices, conduct security assessments, and ensure compliance with industry security standards.

Responsibilities

• Collaborate with development teams to design and implement secure software architectures and coding practices.
• Perform regular security assessments, including static and dynamic code analysis and penetration testing, to identify vulnerabilities and recommend remediation strategies.
• Integrate secure coding practices into the software development lifecycle and promote security best practices for both internal and external applications.
• Track, prioritize, and manage vulnerabilities discovered in applications, working with stakeholders to resolve them promptly.
• Collaborate with the incident response team to address security incidents and analyze them to identify root causes and recommend preventive measures.
• Evaluate, implement, and manage security tools and technologies that enhance application security.
• Ensure applications comply with industry standards and regulations such as OWASP Top Ten, PCI-DSS, and GDPR.
• Provide training and guidance to development teams on secure coding practices and application security threats.
• Maintain comprehensive documentation of security assessments, vulnerabilities, remediation efforts, and security policies.
• Evaluate the security posture of third-party applications and integrations.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field; advanced degree or relevant certifications (e.g., CISSP, CEH, OSCP, GSEC) preferred.
• Minimum of 5 years of experience in application security or a related field, with a strong understanding of software development and security principles.
• Strong understanding in secure coding practices and common security vulnerabilities (e.g., SQL injection, XSS).
• Experience with security tools (e.g., static/dynamic analysis tools).
• Strong understanding of web application security concepts, including OWASP Top 10, SANS 25, and common vulnerabilities.
• Knowledge of programming languages such as Java, C#, Python, PowerBI, or JavaScript.
• Strong problem-solving skills with the ability to analyze complex security issues and provide practical solutions.
• Excellent communication skills with the ability to convey technical concepts to non-technical stakeholders.
• Ability to work collaboratively with cross-functional teams.

Nice-to-haves

• Experience with cloud security and securing cloud-based applications.
• Knowledge of container security (e.g., Docker, Kubernetes).
• Familiarity with DevSecOps practices and tools.
• Familiarity with continuous integration and deployment (CD/CD) processes.
• Knowledge of Agile development methodologies.

Benefits

• Competitive salary range of $120,000-$150,000 depending on experience.