Senior Application Security Engineer
Hiring only on W2
8 Years’ experience
Dallas, TX, in-person client interview
The top skills are:
CompTIA Security+ or equivalent
Deep understanding of security vulnerabilities in multiple programming languages (e.g., Python, Java, JavaScript, C#)
Experience developing automation solutions using Python, Java, or PowerShell.
Description:
Required Qualifications
• Minimum 8 years of experience in application security or software engineering with a security focus.
• Strong programming skills in one or more languages (e.g., Python, Java, JavaScript, C#).
• At least 3 years of experience developing automation solutions using Python, Java, or PowerShell.
Key Responsibilities
• Ability to identify, triage, and remediate issues such as injection flaws, insecure deserialization, and misconfigurations.
• Integrate and manage SAST and DAST tools within CI/CD pipelines.
• Collaborate with development teams to remediate vulnerabilities and enforce secure coding standards.
• Design and implement guardrails for AI-powered applications, mitigating risks like prompt injection, model inversion, and data poisoning.
• Develop and maintain security policies, procedures, and documentation.
• Conduct security assessments and provide actionable recommendations.
• Analyze complex problems and implement effective solutions or workarounds.
• Mentor junior engineers and promote security awareness across teams.
• Build and maintain CI/CD pipelines using tools like Cloud Bees, Jenkins, Buddy, Urban Code, etc.
• Develop automation solutions using Python, Java, or PowerShell.
• Work with APIs, endpoints, and databases to develop integrated security solutions.
• Use IDEs such as Visual Studio, Visual Studio Code, Eclipse for secure development and debugging.
• Implement and manage GitHub Advanced Security features including code scanning, secret scanning, and Depend Bot alerts.
• Apply extensive experience working with DevOps tools such as GitHub, including workflows, actions, and advanced workflow automation.
• Understand and remediate security vulnerabilities across multiple programming languages.
• Work with Azure Resource Manager (ARM) and scripting tools including PowerShell, Azure CLI, JavaScript, Shell scripts, Python, or similar.
• Collaborate within an Agile team environment using Azure DevOps.
• Familiarity with OWASP Dependency-Check and similar tools to manage third-party risks