Job Title:- Application Security Engineer
Location: 9 Metro Tech Center, Brooklyn, 11201 (On-site) Only Local Profiles
C2C, W2.
Duration: Long Term
Job Description:
โข Experience with 4+ years in secure Application Development with Java, Python, .Net, and
scripting languages.
โข Establish application security policies and secure SDLC process.
โข Experience in DevSecOps, secure configurations and benchmarking, automation, software
testing, vulnerability management, malware defenses, networks, reverse engineering, and log analysis
โข Expert in defining secure configurations for Windows and Linux/Android operating systems
โข Perform host or application-based vulnerability scanning and penetration testing
โข Work alongside developers to write and simultaneously secure legacy and new FDNY
applications
โข Educate the FDNY staff regarding secure coding practices
โข Lead Cloud security initiatives
โข Configure and monitor WAFs and Load Balancers
โข Develop, test, and deploy al1 application types, including web, mobile and OS specific builds
โข Design and implement security test plans to improve the security posture of FDNY's applications
โข Assist the various teams internal to FDNY, in reproducing, triaging, and fixing application security vulnerabilities.
โข Monitor and design API security controls
โข Work with tools like Zimperium, Fortify, BurpSuite, Veracode etc.
โข Help integrate security tools, standards, and processes into the software development Cl/CD
pipeline
โข Help improve the security posture of FDNY, especially Internet facing systems
โข Hands on experience with OWASP Top 10
โข Experience with OWASP API Security Top 10
Mandatory Skills
โข Expert in Cloud Security including Container security/Microservices
โข Strong understanding of mobile and web application architecture
โข Seasoned professional who is fully qualified on all aspects of cybersecurity.
โข Extensive knowledge of current security standards, practices, procedures and methods.
โข Experience applying NIST 800-53 security controls to hardware and software products.
โข Working knowledge of Oracle Cloud, Spacewalk, GitHub, or Jenkins
โข In-depth knowledge of Micro Focus technologies: Fortify Static Code Analyzer, Fortify Weblnspect, and/or Fortify Software Security Center
โข Excellent verbal and written communication skills
Preferred Skills
โข Knowledge of as ArcGIS, or other online geographic information system services
โข Familiarity with Computer-aided dispatch (CAD) systems
โข Experience working in an emergency medical service environment