Application Security-100% Remote
Georgia Tek Systems
Atlanta, GA(remote)
Apply
JOB DETAILS
SKILLS
Agile Programming Methodologies, Amazon Web Services (AWS), Applications Security, CISSP - Certified Information Systems Security Professional, Cloud Computing, Code Reviews, Communication Skills, Computer Security, Consulting, Continuous Deployment/Delivery, Continuous Integration, GPEN - GIAC Penetration Tester, IBM Rational AppScan, Information/Data Security (InfoSec), Internet Application, Internet Security, Presentation/Verbal Skills, Programming Languages, Risk Management, Software Testing, Static Analysis, Team Player, United States Department of Energy (DOE), Web Testing, Writing Skills
LOCATION
Atlanta, GA
POSTED
30+ days ago
Application Security
Location: Atlanta,GA or 100% Remote
Duration: 06 Months plus
Rate: DOE
US Citizens and Green cards are Preferred.
Core Duties / Responsibilities:
Requirements/Skills/Qualifications:
Location: Atlanta,GA or 100% Remote
Duration: 06 Months plus
Rate: DOE
US Citizens and Green cards are Preferred.
Core Duties / Responsibilities:
- Conduct remediation validations against prior findings
- Conduct manual code reviews
- Conduct static code analysis
- Know false positive from true positive
- Development experience in multiple languages
- Consult with developers and architects on secure development
- Work with application teams to communicate vulnerabilities, provide remediation guidance, demonstrate issues and work with developers to remediate and mitigate risks
- Work on and track tasks via ticketing system
- Familiar with AWS and other cloud technologies
- Stay up to date on application security attack vectors and risks
Requirements/Skills/Qualifications:
- Experience in multiple areas of Information Security
- Extensive experience in web application security testing
- Extensive experience in application security
- Extensive experience in performing secure code reviews (both automated and manual)
- Familiar with OWASP Top 10
- Familiar with development methodologies
- Experience with one or more programming languages
- Ability to automate repeatable tasks
- Strong verbal and written communication skills
- Development experience
- Experience working in large enterprises
- Familiarity or experience with CI/CD pipelines and Agile methodologies
- One or more of the following certifications (or similar): GPEN, GWAPT, GWEB, OSCP, CISSP, eCPPT, etc.
- Familiarity with tools such as Veracode, Checkmarx, Fortify, Burp, IBM AppScan, and BlackDuck
About the Company
G