Award winning, 100 year High Tech Product Manufacturing leader is looking for a Sr Application Security Engineer to enhance multiple software teams Secure Development Environment. This company is in new product development mode, developing a number of new SaaS products, Web Applications and high tech products that run on IoT. High visibility position! Chance to make a major impact on the success of this major corporation! Stable environment offering major opportunities for growth and more responsibility! This is a unique opportunity to join one of the top companies in their industry and be part of an environment with dynamic long-term career growth
What are people saying about this company?
- They invest in their people via training
- Allow you the independence to do your job without looking over your shoulder.
- Supportive. Good benefits. Nice culture to work in. Great people.
- Cutting edge technology, incredible culture, great leadership team!
Title: Sr Application Security Engineer - HYBRID
Salary: $125,000 – 145,000 plus Bonus
Locations: Herndon VA, or St Louis, MO or Cleveland, OH
Responsibilities:
- This Application Security Engineer will work with multiple software engineering/development teams to improves their secure development environment. This corporation is developing several new products, from cutting edge SaaS products to a variety of widely used sensors. This Application Security Engineer will secure these critical products, leading the integration of cybersecurity into products and applications.
- You will collaborate and advise product engineering and software delivery teams across various projects and languages, adhering to and augmenting the corporations established Secure Development Lifecycle (SDL) standards.
- You will partner with engineering teams to identify and address application security vulnerabilities across solutions that help electric, water, and gas utilities provide safe, reliable, and efficient operations of their distribution networks, and enjoy working with a world-class security team, then this might be the job for you.
- Continuously refine and promote a comprehensive Secure Development Lifecycle (SDL) process throughout the entire product lifecycle.
- Advocate for the widespread adoption of this unified SDL approach, ensuring a holistic and standardized security framework.
- Assess and facilitate secure coding training initiatives and the effective use of application security tools, particularly Static Application Security Testing (SAST) and Software Composition Analysis (SCA), for engineering teams.
- Assume the position of a security advisor for multiple products, leading critical activities such as security strategy reviews, security touchpoints, and final security reviews.
Qualifications
- Bachelor's degree in computer science or related engineering discipline, or equivalent experience.
- 4+ years of application security and security testing experience, experience in product development and security design focused on secure product delivery and testing tools.
- Prior hands on experience with C#, .Net or C/C++ would be ideal. Experience working in an Azure Cloud environment preferred, but working with AWS or GCP is ok
- In-depth knowledge of secure coding and DevSecOps practices.
- Experience using, configuring, and tuning application security tools, especially SAST and SCA.
Desirable:
- Advanced understanding of security approaches and architectures applicable to utility communications and distribution automation solutions for operational technology (OT).
- Previous experience developing embedded products, web services and Service Oriented Architecture (SOA).
