Job Summary:
Damco Solutions is seeking an Application Security Engineer who will support clients in integrating security into all stages of software development. The role involves designing and building secure applications while collaborating with application administrators and ensuring adherence to secure coding practices and standards.
Responsibilities:
• Establish and apply secure coding practices within the development team.
• Define and enforce secure coding standards for Java, .NET, Python, and JavaScript applications.
• Conduct secure design and architecture reviews for new and legacy systems.
• Educate developers on secure coding practices, authentication/authorization best practices, and common application vulnerabilities.
• Apply protections aligned with:
• OWASP Top 10
• OWASP API Security Top 10
• Design and implement secure REST APIs and web services.
• Implement secure authentication/authorization using:
• SAML2
• OIDC
• OAuth2
• Secure Java and JavaScript applications, including:
• Spring Boot
• React
• Ensure secure handling of tokens, sessions, and secrets.
• Collaborate with App Admins and Security team to integrate applications into WAFs, load balancers, and other security monitoring tools.
Qualifications:
Required:
• Associates Degree or combination of experience and education.
• 4+ years of experience in secure application development.
• 1+ year of experience with hands-on software development experience.
• 4+ years demonstrating an understanding of: Web and mobile application architecture, Internet protocols (HTTP, HTTPS, WebSockets), REST API security.
• Expertise in SAST, DAST, and SCA concepts (understanding results and remediation), in collaboration with App Admins.
• Familiarity with security tools such as Veracode, Burp Suite, Zimperium, Prisma, Rapid7.
• Experience applying NIST 800-53 and 800-171 controls at the application design level.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to work independently within a development-focused team.
Preferred:
• Experience with containerized applications (Docker, Kubernetes).
• Knowledge of: Core Java, J2EE, Spring Boot, React, AngularJS, HTML5, CSS, JavaScript.
• Experience designing secure GIS systems.
• Familiarity with public safety or emergency response systems.
Company:
Damco Solutions is a provider of IT solutions, services, and products. Founded in 1996, the company is headquartered in Plainsboro, USA, with a team of 1001-5000 employees. The company is currently Late Stage.