Application Security Engineer

$140,000 - $140,000/Yr

Paycom Payroll - Oklahoma City, OK

Full-time

Remote - Oklahoma City, OK

Professional, Scientific, and Technical Services

About the position

The Application Security Engineer at Paycom Payroll, LLC is responsible for leading advanced web penetration tests, analyzing security issues, and collaborating with software development teams to enhance application security. This role involves threat modeling, documentation, and providing guidance on security best practices, ensuring that security measures align with business requirements.

Responsibilities

• Lead advanced web penetration test assessments and manual code review.
• Analyze complex or recurring security issues within the application and work with software development teams on remediation.
• Contribute to the creation, maintenance, and improvement of documentation around security, policies, standards, guides, and procedures.
• Support Sr. Application Security Engineers with large-scale security initiatives.
• Work closely with Software Development Delivery teams, Product Owners, and Development Project Managers to identify module-specific risks through threat modeling and provide mitigation recommendations.
• Participate in and lead advanced threat modeling and document module risks and potential mitigation techniques.
• Act as a Subject Matter Expert (SME) on assigned modules, advanced vulnerabilities, and automation technologies.
• Assist in the development of in-house security solutions for security testing and compliance requirements.
• Work with the DevOps team on the integration of security tools into the DevOps lifecycle.
• Lead research on 3rd party tools, software libraries, APIs, and other incoming technology for security viability and document any concerns prior to application integration.
• Interface with other departments to gain insight into new technology and initiatives as needed.
• Provide guidance and training to application security analysts about complex vulnerabilities and remediation techniques.
• Assist application security analysts in reproducing, triaging, and addressing complex application security vulnerabilities.
• Attend trainings, pursue certifications, and research vulnerabilities, remediations, and new technology to learn and stay up to date on security best practices.

Requirements

• Bachelor's degree in Management Information Systems, Computer Science, Cybersecurity or a related field plus 5 years of experience in application security or IT security.
• Proficiency in PHP, Python, C#, Java, C++, C, JavaScript, and React.
• Experience implementing information security principles and practices.
• Familiarity with the OWASP Top 10 vulnerabilities list, including finding, exploiting, and remediating these vulnerabilities.
• Experience with cluster and container technologies, including Kubernetes and Docker.

Benefits

• Salary range of $125,840 to $140,000 per year.