Location/Remote: 100% remote, but must be willing to work Eastern Time Zone hours
Employment Type: Perm / Direct Hire / Full-time
Compensation: up to $150k base
Benefits: medical, dental, vision, LTD/STD, HSA/FSA, term life, and supplemental health insurances (e.g., Aflac) for all employees (and their families if needed)
We are seeking a highly skilled Application Security Engineer with a strong focus on securing Azure-based .NET applications. The ideal candidate will have a deep understanding of application security best practices, threat modeling, and vulnerability assessment. This role requires hands-on experience with SAST and DAST tools, particularly Veracode, to identify and remediate security risks.
Responsibilities:
- Conduct threat modeling and risk assessments for .NET applications deployed on Azure.
- Perform static application security testing (SAST) using Veracode to identify vulnerabilities in the codebase.
- Execute dynamic application security testing (DAST) to assess application security during runtime.
- Collaborate with development teams to remediate security vulnerabilities and implement secure coding practices.
- Stay up-to-date on the latest security threats and vulnerabilities, and implement countermeasures.
- Develop and maintain security standards and guidelines for the organization.
- Participate in security incident response and investigations.
Qualifications:
- 5+ years of experience in application security, with a focus on .NET web applications.
- Experience securing Azure-based web applications
- Proven experience using Veracode to conduct security assessments using SAST and DAST testing techniques.
- Knowledge of OWASP Top 10 vulnerabilities and security best practices.
- Excellent analytical and problem-solving skills.
- Effective communication and collaboration skills.
- Ability to work independently and as part of a team.