Application Security Engineer

Insight Global - Robbinsville Township, NJ

Full-time

Robbinsville Township, NJ

Administrative and Support Services

About the position

The Application Security Engineer will collaborate with corporate application development teams to ensure the security of corporate applications. This role involves identifying application assets, data flows, threats, and necessary cybersecurity controls, as well as working with Application Security Testers to evaluate the effectiveness of these controls.

Responsibilities

• Collaborate with application development teams to ensure application security.
• Identify application assets, data flows, and potential threats.
• Implement required cybersecurity controls for corporate applications.
• Work with Application Security Testers to measure the effectiveness of security controls.

Requirements

• Bachelor's degree in Cyber Security or a related field.
• 5-8 years of experience in Cyber Security.
• 2+ years of experience in Agile methodologies and writing user stories.
• 2+ years of experience in Application Security and Threat Modeling.
• Experience in application development or secure code review.
• Understanding of API and Web security vulnerabilities.
• 2+ years of experience using Octave or Stride.
• Experience working within a DevSecOps environment.
• Familiarity with Microsoft technologies including .NET, Ruby, Python, PHP, and Java.
• Experience with web application firewalls.
• Familiarity with OWASP Top 10 API, Web, and Mobile Application Security Risks.
• Familiarity with MITRE CWE Top 25 Most Dangerous Software Weaknesses.
• Relevant certifications such as CDP, CISSP, E, CDE.
• Familiarity with regulatory controls and industry best practices (HIPAA, PCI, CIS, HiTrust, ISO 27001, NIST).