Application Security Engineer

Infojini - Dallas, TX

Full-time

Dallas, TX

Professional, Scientific, and Technical Services

About the position

The Application Security Engineer role focuses on ensuring the security of applications through various testing and integration practices. The engineer will be responsible for implementing security measures within the software development lifecycle and integrating security tools into CI pipelines. This position requires a strong understanding of application security testing, cloud security, and the ability to communicate vulnerabilities effectively.

Responsibilities

• Conduct application security testing using tools like BurpSuite and ZAP.
• Integrate security linting tools, SAST, or DAST into CI pipelines as part of DevSecOps practices.
• Implement automated solutions for cloud resource security, including designing honeypots to block malicious traffic.
• Assess vulnerabilities and provide insights on remediation strategies.
• Communicate vulnerabilities in both technical and layman's terms to various stakeholders.

Requirements

• Strong proficiency in application security testing tools such as BurpSuite and ZAP.
• Hands-on experience with DevSecOps practices and integrating security tools into CI pipelines.
• In-depth knowledge of at least one programming language (C++, JavaScript/NodeJS, or Python).
• Experience with Cloud Security Posture Management and implementing automated security solutions.
• Strong understanding of AWS Cloud Technologies and Solutions.
• Knowledge of the Software Development Lifecycle (SDLC) and vulnerability assessment.