Application Security Engineer

ABB Schweiz AG; Umm Al Quwain; Hybrid; USD 60,000 - 100,000; Full time

Job summary

An innovative firm is seeking a passionate Application Security Engineer to enhance software security practices. In this hybrid role, you will leverage your expertise to educate teams on secure coding, conduct code reviews, and design security architectures for cutting-edge products. Join a forward-thinking company dedicated to sustainability and technological advancement, where you will play a crucial role in shaping the future of secure software development. If you are driven by curiosity and collaboration, this opportunity is perfect for you!

Qualifications

• Strong understanding of application security principles and secure coding practices.
• Hands-on experience with containerization and orchestration tools.

Responsibilities

• Educate development teams on secure coding practices through workshops.
• Review source code for security vulnerabilities and provide feedback.
• Design and implement security architecture for products.

Skills

C#

Rust

Python

JavaScript

Application Security Principles

Secure Coding Practices

Network Security

Encryption

Access Management

Tools

SonarQube

OWASP ZAP

Nessus

Invicti

Docker

Kubernetes

Job description

Application Security Engineer

At ABB, we are dedicated to addressing global challenges. Our core values: care, courage, curiosity, and collaboration - combined with a focus on diversity, inclusion, and equal opportunities - are key drivers in our aim to empower everyone to create sustainable solutions. Write the next chapter of your ABB story.

This position reports to

R&D Unit Lead

Your role and responsibilities

In this role, you will have the opportunity to initiate and drive technology, software, product, and/or solution development using in-depth technical expertise in a specific area. Each day, you will act as the first point of contact in Research and Development (R&D) for in-depth product or technology-related issues. You will also showcase your expertise by supporting strategic corporate technology management and future product/software/solution architecture.

The work model for this role is: #LI Hybrid. This role contributes to the Process Automation Business of the Process Control Division in Bangalore. You will mainly be accountable for:

1. Secure Coding Practices: Educate and advocate for secure coding practices among development teams through workshops, training sessions, and documentation.
2. Code Review: Review source code for security vulnerabilities and provide actionable feedback to development teams.
3. Security Architecture: Design and implement security architecture and controls for new and existing products.
4. Security Assessments: Conduct regular security assessments, including threat modeling, Attack Surface Analysis, and Critical Analysis.

Qualifications for the role

• Understanding of programming languages such as C#, Rust, Python, or JavaScript.
• Strong understanding of application security principles and secure coding practices.
• Knowledge of network security, encryption, access management, and their best practices.
• Experience with security tools and processes such as SAST, DAST, SCA, and vulnerability scanners (e.g., SonarQube, OWASP ZAP, Nessus, Invicti).
• Knowledge of security frameworks (e.g., OWASP Top Ten, NIST, IEC 62443, ISO 27001).
• Knowledge of cloud platforms (e.g., AWS, Azure, Google Cloud) and their security features.
• Hands-on experience with containerization and orchestration tools such as Docker and Kubernetes.

More about us

ABB provides a comprehensive range of integrated automation, electrical, and digital systems and services for customers in the process, hybrid, and maritime industries. These offerings, coupled with deep domain knowledge in each end market, help to optimize productivity, energy efficiency, sustainability, and safety of industrial processes and operations.

We value people from different backgrounds. Apply today for your next career step within ABB and visit www.abb.com to learn about the impact of our solutions across the globe.

Note: It has come to our attention that the name of ABB is being used for asking candidates to make payments for job opportunities (interviews, offers). Please be advised that ABB makes no such requests. All our open positions are available on our official career portal. ABB does not charge any fees for recruitment. Please do not make payments to any individuals or entities claiming to represent ABB in recruitment processes. For current open positions, visit our career website: https://global.abb/group/en/careers. For more information, refer to our fraud warning notice at https://global.abb/group/en/careers/how-to-apply/fraud-warning.