Job Title: Application Security Engineer
Location: WFH USA Texas Houston
Rate range $65/hr to $70/hr
Years of Experience: 7- 10 Years
Job Summary
We are seeking an experienced Application Security Engineer to join our team. The ideal candidate will have a strong background in application security concepts and practices, with a focus on implementing and maintaining secure server baselines, conducting security assessments, and managing identity and access controls. This role requires a proactive approach to identifying and mitigating security risks across various platforms and applications.
Responsibilities
- Implement and maintain secure server baselines (Windows, Linux, Cloud) aligned with CIS Benchmarks and security standards.
- Conduct Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) assessments for in house and third party applications.
- Identify, prioritize, and coordinate remediation of vulnerabilities across applications, APIs, databases, and infrastructure.
- Manage Identity & Access Management (IAM), including privileged access, service accounts, API keys, and Multi Factor Authentication (MFA).
- Investigate and respond to server and application security incidents.
- Integrate security controls into Continuous Integration/Continuous Deployment (CI/CD) pipelines, including container scanning and secrets management.
- Ensure security logs, Endpoint Detection and Response (EDR)/Host Intrusion Detection System (HIDS) telemetry, and application events are integrated with the Security Information and Event Management (SIEM) system.
- Review server, application, Docker, and Kubernetes configurations to identify and mitigate security risks.
- Support patch management, security reviews, threat modeling, and secure release processes.
- Develop security standards, procedures, and technical documentation; provide risk based recommendations to stakeholders.
Mandatory Skills
- Strong understanding of application security concepts and practices.
- Experience with SAST, DAST, and SCA tools.
- Proficiency in managing AWS IAM Idaas solutions and practices.
- Experience with CI/CD Pipeline tools and integrating security into the development lifecycle.
- Familiarity with security logging and monitoring tools, particularly SIEM.
Preferred Skills
- Experience with cloud security practices and tools.
- Knowledge of Docker security and Kubernetes.
- Familiarity with Threat Modelling methodologies.
- Experience with security frameworks and compliance standards (e.g., NIST, ISO 27001).
Qualifications
- Bachelor's degree in Computer Science, Information Technology, or a related field.
- 7 10 years of experience in application security or related fields.
- Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Application Security Engineer (CASE) are preferred.
- Strong analytical and problem solving skills.
- Excellent communication and collaboration skills.
If you are passionate about application security and meet the qualifications outlined above, we encourage you to apply for this exciting opportunity.