Application Security Engineer

D&H Distributing - Harrisburg, PA

Full-time - Mid Level

Harrisburg, PA

Merchant Wholesalers, Durable Goods

About the position

The Application Security Engineer is responsible for ensuring the security and reliability of systems, services, applications, and infrastructure. This role requires proficiency in assessing application security, understanding the secure software development lifecycle (SDLC), and familiarity with security standards and protocols. The engineer will conduct security assessments, maintain compliance, and design new security technologies with minimal oversight, while also providing training and support to team members.

Responsibilities

• Familiarity with the secure SDLC
• Proficiency in at least one programming language
• Experience conducting code reviews from a cybersecurity perspective
• Familiarity with the OWASP Top 10
• Experience with OAUTH and ADFS
• Conduct security assessments, including assessing the security of third-party vendors
• Stay up to date on the latest security and industry trends
• Maintain knowledge of cybersecurity frameworks such as NIST and CIS
• Oversee the security controls for the company with minimal oversight
• Design and implement new security technologies with minimal oversight
• Provide training to other team members with minimal oversight
• Maintain complex project tasks and interface with various teams with minimal oversight
• Assist in developing new features for the SIEM
• Identify and design new security policies for the organization with oversight
• Assist in maintaining PCI compliance with minimal oversight
• Aid in the design, implementation, and enhancement of the security awareness program with minimal oversight
• Assist in process improvements to enhance operational efficiency
• Coordinate relations between business and IT staff
• Develop short-term and long-term department goals
• Ensure coordination and communication of production changes
• Participate in company communication efforts
• Maintain a positive and professional working relationship with peers and management

Requirements

• Associates degree in Cybersecurity or similar area of study required
• Bachelor's degree in Cybersecurity or similar area of study preferred
• At least 3-5 years of experience in cybersecurity with application security preferred
• Industry certifications (CSSLP, CASE, CEH, Security+, CISSP, GWEB, CCNA Security or similar) preferred
• Scripting experience in PowerShell, Python or Perl preferred
• Exceptional verbal and written communication skills
• Ability to prioritize and execute tasks in a high-pressure environment
• Ability to lead complex initiatives and project teams with supervision
• Strong time management, attention to detail, and communication skills

Nice-to-haves

• Proficiency in web development, .NET, and/or Java
• Familiarity with API security best practices
• Ability to design and support the implementation of security as part of the continuous deployment process