Location / Remote : 100% remote, but must be willing to work Eastern Time Zone hours
Employment Type : Perm / Direct Hire / Full-time
Compensation : up to $175k base
Benefits : medical, dental, vision, LTD / STD, HSA / FSA, term life, and supplemental health insurances (e.g., Aflac) for all employees (and their families if needed)
We are seeking a passionate and experienced Application Security Engineer to join our team and play a pivotal role in safeguarding our Azure-based .
NET-based web applications. You will be responsible for identifying, analyzing, and mitigating security vulnerabilities throughout the development lifecycle.
Your expertise in SAST, DAST, and SCA tools, coupled with a strong understanding of security best practices, will be instrumental in ensuring the security of our applications.
Responsibilities :
- Conduct comprehensive security assessments of .NET web applications hosted on Azure, leveraging SAST, DAST, and SCA testing techniques.
- Analyze identified vulnerabilities, evaluate their severity, and recommend effective remediation strategies.
- Work closely with development teams to ensure timely and effective resolution of security vulnerabilities, promoting secure coding practices throughout the development lifecycle.
- Actively participate in code reviews to identify potential security flaws early in the development process.
- Stay abreast of the latest web application security threats and vulnerabilities, including those listed in the OWASP Top 10.
- Develop and maintain secure coding practices and security policies within the organization.
- Incident Response : Contribute to the overall security posture of the company by participating in security awareness training and incident response activities.
- Integrate SAST, DAST and SCA tools like Veracode into CI / CD pipelines across multiple organizations using various platforms.
- Analyze vulnerability findings and customize reports to address specific organizational needs.
- Develop and deliver OWASP Top 10 training to educate developers on secure coding practices.
- Assist developers with integrating CI / CD tooling and development processes to streamline security workflows.
- Demonstrate familiarity with security best practices such as NIST Cybersecurity Framework
Qualifications :
- 4+ years of experience in application security, with a strong focus on Azure-based .NET web applications.
- Proven experience using Veracode to conduct SAST, DAST, and SCA security assessments.
- In-depth understanding guiding developers to implement and understand OWASP methodologies and web application security threats.
- Previous software development experience (C# / .NET preferred)
Preferred Skills (not required) :
- Experience with security frameworks and compliance standards (NIST CSF, 800-53, 800-171).
- Familiarity with cloud platforms, particularly Azure, and cloud-native security best practices.
Senior Application Security Engineer
A company is looking for a Senior Application Security Engineer, AWS Generative AI Security. ...
Lead Application Security Engineer
LeadApplication Security Engineer. Lead Application Security and Testing Engineer. Reporting to the Director of Application Security and Testing, you’ll evaluate the security of in-house or third-party software and devices across the business. Direct experience in application security or testing of ...
Application Security Engineer - VA
A company is looking for an Application Security Engineer in the Mid-Atlantic region. ...
Senior Application Security Engineer (REMOTE)
The application security engineer not only demonstrates the skills and knowledge of a seasoned hands-on security professional but also participates in efforts to enhance application security and development practices of product teams. We are looking for a manager who is dynamic, and enthusiastic app...
Senior Cloud/Applications Security Engineer
Conduct Static Application Security Test (SAST) and Dynamic Application Security Test (DAST) using VeraCode. We are looking for a Senior Cloud/Applications Security Engineer for a 12 month contract in Atlanta, GA. Minimum 5+ years of professional experience in application security, penetration testi...
Sr. Application Security Engineer
Strong understanding of application security standards and practices, such as the OWASP Mobile Application Security Verification Standard (MASVS) and Mobile Security Testing Guide (MSTG). Application Security Engineer, you will be an important member of our client's Global Information and Content Se...
Lead Application Security Engineer, Mobile Security
Strong understanding of application security standards and practices is preferred but not mandatory, such as the OWASP Mobile Application Security Verification Standard (MASVS) and Mobile Security Testing Guide (MSTG). As a Lead Application Security Engineer with a focus on Mobile Security, you will...
Application Security Engineer
We're looking for an Application Security Engineer to join our growing team. Required: 5+ years' experience as an Application Security Engineer using technologies such as Qualys WAS, Wiz, Javascript, C#. NET/Java Strong static analysis tools (SAST) to secure applications including Veraco...
Sr. Application Security Engineer (seeking Mobile Development experience for iOS/Android)
Strong understanding of application security standards and practices, such as the OWASP Mobile Application Security Verification Standard (MASVS) and Mobile Security Testing Guide (MSTG). Application Security Engineer, you will be an important member of the Warner Bros. This is a key role that will ...
Application Security Engineer
Strong understanding of application security standards and practices, such as the OWASP Mobile Application Security Verification Standard (MASVS) and Mobile Security Testing Guide (MSTG). As a Application Security Engineer, you will be an important member of our client's Global Information and Conte...