Senior Application Security Developer

Avéva - Lake Forest, CA

Full-time - Senior

Lake Forest, CA

Motor Vehicle and Parts Dealers

About the position

The Senior Application Security Developer at AVEVA is responsible for enhancing the security of cloud applications by identifying vulnerabilities, designing solutions, and automating security processes. This role involves collaboration with development teams to ensure operational security and compliance within cloud environments, specifically AWS and Azure. The position requires proactive engagement in security practices and the ability to respond to security incidents effectively.

Responsibilities

• Perform security-focused code reviews.
• Use experience of secure application development to assess our cloud infrastructure.
• Test our cloud infrastructure for security holes.
• Monitor and analyze security relevant logs, alerts, and events associated with security incidents.
• Respond to security incidents as identified by users or security monitoring tools to mitigate threats.
• Execute standard operating procedures in response to any security relevant logs, alerts, and events.
• Continuously improve security tooling and processes.
• Build code to support automation and manage cloud setup e.g. Azure Functions, AWS Lambdas, Scripts etc.
• Improve our cloud estate management processes and tooling.
• Update the IaC code base which describes the cloud configurations.
• Provide support outside of core hours where required.
• Work with development teams to advise and contribute to improvements to security, cost management, and cloud compliance.
• Stay current on security industry trends, tools, and best practices.

Requirements

• Experience in researching and identifying new threats, vulnerabilities, and risks for Cloud-native environments.
• Experience of developing secure applications.
• Experience of testing applications security.
• Experience of cloud security management in either AWS or Azure.
• Experience of developing code to help automate/control the cloud environment in Python/C#.
• Experience of operating/building services in either AWS or Azure.
• Experience of writing infrastructure as code in either CloudFormation/ARM/Terraform.
• Strong written, verbal, and presentation skills.
• Attention to detail, diligent and tenacious.
• Excellent analysis and dissemination skills.
• High degree of personal motivation and ability to self-manage.
• Maintains and develops relevant industry and technology knowledge.
• Working within an Information Security accredited framework e.g. ISO27001, 27017/18.

Nice-to-haves

• Security related certifications e.g. Microsoft's Security Operations Analyst, AWS Certified Security Specialist, CCSP.
• Certifications in Azure and/or AWS e.g. AWS Solutions Architect, Solutions Architect for Azure.

Benefits

• Flexible working options available.