Senior Application Security Engineer

$119,000 - $125,000/Yr

Planetart.Com - Calabasas, CA

Full-time - Senior

Hybrid - Calabasas, CA

251-500 employees

Publishing Industries

About the position

The Senior Application Security Engineer at PlanetArt plays a crucial role in supporting the Information Security department by enhancing the Application Security program. This position focuses on identifying security vulnerabilities in applications, educating developers on remediation, and ensuring secure business functions. The engineer will be involved in security testing, automation, and collaboration with development teams to foster strong application security practices.

Responsibilities

• Perform security testing on internally developed applications and clearly document findings and recommendations
• Create and maintain security automation and scripting to improve security controls within PlanetArt
• Evaluate, classify, prioritize, and convey findings from SAST, Pen Tests, SCA, BBP, and manual testing to internal development teams
• Help manage our Bug Bounty Program and act as a liaison between external researchers and internal development teams
• Assist in the development of secure code libraries where applicable
• Act as technical liaison between Information Security and application development teams, guiding teams towards strong application security practices and remediating known risks
• Develop and support integration and automation within security, monitoring, reporting, and ticketing platforms
• Develop internal processes and suggest improvements for increased security and efficiency

Requirements

• 8-12 years' experience within Cybersecurity with a proven focus on Application Security
• 4-8 years working exposure to code development either through hands-on developments, code review, or a combination of the two and 2-4 years specifically in application security
• Hands-on experience working in cloud environments, and a firm grasp on cloud architecture
• Must be well organized, thrive in a sense-of-urgency environment, leverage best practices, and innovate through any problem with a can-do attitude
• Must understand various systems technologies, architecture fundamentals, next-generation technology and how security comes into play or is affected
• Proven communication skills, the ability to present information clearly and concisely to all levels of management both formally and informally
• Working knowledge of code versioning tools like Git and continuous delivery tools like Jenkins
• Familiarity with OWASP top 10 vulnerabilities, mitigations and their impact on application architecture
• Understand information security concepts, protocols, and industry best practices
• Experience with application security testing including SAST, DAST and SCA

Benefits

• Health, Dental, and Vision Insurance
• Life Insurance
• 401(k) with matching
• Excellent Work/Life Balance - Paid Time Off, Sick Days, Paid Holidays, and Floating Holidays
• Employee Product Discounts