Application Security Engineer II

Ellucian Company L.P.; Mexico; On-site; PHP 279,000 - 446,400; Full time

Job summary

Ellucian Company L.P. is seeking an Application Security Engineer in Pampanga, Philippines. In this role, you will analyze the security of applications, conduct penetration testing, and provide guidance on security vulnerabilities.

The ideal candidate will have 2-5 years of relevant experience, knowledge of application security practices, and excellent problem-solving skills. Join us to enhance the security initiatives at Ellucian.

Qualifications

• 2 to 5 years of experience as Application Security Engineer or similar.
• Knowledge of OWASP application security tools and practices.
• Experience with manual and automated application penetration testing.

Responsibilities

• Analyze the security of Ellucian applications.
• Perform application penetration testing.
• Guide development teams in remediating security vulnerabilities.

Skills

Application Security

Penetration Testing

SAST

DAST

Troubleshooting

AI Security Testing

Tools

Jenkins

AWS

Job description

About the Opportunity

Ellucian designs technology that powers the educational mission of colleges and universities around the world. Inspired by that goal, Ellucian employees thrive as part of a high-performing global team committed to delivering a modern, connected, industry-leading experience for today’s students and higher education institutions. The individual in this position will be a contributor to DevSecOps and overall application security initiatives in Ellucian.

Where You Will Make an Impact

• Analyze the security of Ellucian applications and coding practices using a variety of tools and frameworks.
• Perform manual and automated application penetration testing.
• Provide guidance to development teams for remediating application security vulnerabilities.
• Develop innovative new DevSecOps solutions to application security problems.
• Act as an evangelist for DevSecOps and application security within Ellucian.
• Create and deliver application security training for product owners, business analysts, test engineers and developers.
• Lead ongoing process and policy improvement efforts.
• Provide mentoring to members of development teams.
• Conduct ongoing research of trends in application security practices, tools and utilities.

What You Will Bring

• A strong passion for application security.
• 2 to 5 years of experience working as Application Security engineer or similar position.
• Thorough knowledge of SAST, DAST, SCA tooling.
• Extensive skills and experience performing application security / penetration testing using manual and automated tools including AI.
• Progressive application security and software development experience.
• Demonstrated technical skills, especially in the areas of enterprise application security, AI security testing, and secure development practices.
• A thorough understanding of OWASP application security tools, code libraries and documentation.
• Experience developing automated solutions to application security problems.
• Demonstrated ability to clearly communicate complex ideas verbally and in writing.
• Excellent troubleshooting, problem-solving, and analytical skills.
• Ability to occasionally work off-hours or extended hours in support of various projects.

Desired Skills/Knowledge/Experience

• Preferable experience of 2-5 years in performing manual and tool driven penetration testing for web apps, APIs.
• Knowledge or experience of DevOps tooling such as Jenkins is a plus.
• Understanding of WAF, IAST & RASP.
• Understanding of containers, virtualization and orchestration tools.
• Experience securing Cloud applications in AWS.
• Application security certification such as CSSLP, GIAC GWAPT or similar.
• Experience remediating application vulnerabilities.
• AWS knowledge and/or certifications is an advantage.