Technology Engineer, Application Security

What you'll do

• Identify, evaluate, and mitigate application security risks throughout the entire software development lifecycle.
• Provide guidance on mitigation strategies for OWASP Top 10 web application risks to relevant teams.
• Triage and remediate web application security vulnerabilities within the organization.
• Manually validate compensating controls when direct remediation of identified vulnerabilities is not immediately possible.
• Analyze and manually validate software vulnerabilities to distinguish legitimate attacks from false positives.
• Design, build, and maintain technology solutions while selecting appropriate platforms and configuring systems.
• Develop software components and hardware for new and emerging technology projects aligned with business goals.
• Provide consultation on common issues and best practices for junior staff members.

What we're looking for

• Candidates must have a bachelor's degree or an equivalent combination of education, certifications, and experience.
• Candidates must have 3+ years of relevant or direct industry experience.
• Must possess good verbal and written communication skills.
• Must have a software development background, preferably in Java and/or .NET.
• Must have demonstrated experience in software development with comprehensive knowledge of application security.
• Must be proficient in triaging and remediating web application security vulnerabilities.
• Must have a practical understanding of the OWASP Top 10 web application risks.
• Experience in incident response pertaining to application attacks is an advantage.