Application Security Engineer
Open Systems Technologies
New York, NY
A financial firm is looking for an Application Security Engineer to join their team in Iselin, NJ or NYC.
Compensation: $150-200k
Responsibilities:
- Perform Application Security scans (e.g. DAST and SCA) on applications and APIs to identify security vulnerabilities and weaknesses
- Triage security findings and collaborate with development teams to prioritize and remediate identified vulnerabilities
- Drive threat modelling as a standard part of the SDLC, and develop and maintain threat models for critical applications, identifying potential security risks and proposing mitigations
- Drive the Security Champions program, and define and promote secure coding practices, patterns, and standards across development teams
- Conduct security reviews and provide guidance on security requirements for new features and projects
- Assist in the analysis, selection and rollout of new application security tools, processes, and standards
Qualifications:
- Proven experience in application security with a focus on application security testing and vulnerability management
- Hands-on experience with Application Security tools
- Strong understanding of common application vulnerabilities (e.g., OWASP Top 10) and mitigation techniques
- Experience with threat modelling methodologies and tools
- Proficiency in at least one programming language (e.g., Java, Python, JavaScript)
- Excellent communication and collaboration skills, with the ability to work effectively in cross functional teams
- Strong understanding of risk management
- Degree in a technology discipline (Computer Science, Information Management, Computer Engineering, Cybersecurity or equivalent)
- Relevant security certifications (e.g. CISSP, CEH, CSSLP) or equivalent is preferred
About the Company
Open Systems Technologies
At OST, we’re a bit like what you may call a machine, but with a more human touch. Day in and day out for the last 28 years we’ve been more than just a staffing company. Throughout this time we’ve built relationships, we’ve grown together internally and externally, and have created a system that allows us to personally cater to the needs of our clients and candidates. As we celebrate this occasion, it important to note that for us, 28 years is more than just a number or an anniversary. It is 28 years of relationships, 28 years of trust, and 28 years of total reliability. We’ve been a mentor for some, a team builder for others, but most importantly we’ve been there. We know there is no substitute for experience, so let us help you navigate through the ever changing web of talent.
Operating in a crowded marketplace, we have succeeded by staying ahead of the curve. No two projects are the same, and neither are our solutions. We’ve got the connections. We know the people. We have the opportunities. How soon can you start?