Applicatin security engineer

Next Level Business Services Inc.; United States; On-site; USD 140,000 - 210,000; Full time

Job summary

Next Level Business Services Inc. is seeking a seasoned Applications Security Testing lead to drive security assessments, define testing scope and methodology, and communicate findings to stakeholders.

The role requires deep expertise in SAST/DAST, SCA, and secure coding practices across multiple languages. Responsibilities include performing SAST scans, SCA, automated tool scans, and manual reviews, while managing the DevSecOps pipeline to enforce strong security across major client projects.

Qualifications

• Has at least 10 years of experience in IT security and preferably in Application security testing and Development.
• Experience in Application Security Assessment, Secure Code Review – DAST & SAST.
• Experience in SAST tools like IBM AppScan Source, HP Fortify, Checkmarx etc.
• Experience to execute on various security tools like Checkmarx, Fortify, Nessus, Veracode, IBM Appscan etc.
• Expert in secure programming coding for languages like Java, C, C++, .NET, Python etc.
• Expert in Security Frameworks to protect the applications from various attacks.
• Has excellent written and verbal communications skills and able to work with technical experts and business stakeholders at a non-technical level.

Responsibilities

• Lead Applications Security Testing activities and provide technical assessment to stakeholders.
• Conduct SAST scans and Software Composition Analysis (SCA).
• Perform automated tool scanning and execute manual reviews.
• Manage DevSecOps pipeline for major customer security requirements.
• Provide security consulting to design and development teams during requirements, design, and development.
• Recommend process improvements to optimize the security architecture lifecycle.

Skills

IT security (10+ yrs)

Application security testing

DAST

SAST

SCA

SAST tools

Secure coding

Security frameworks

Communication skills

Tools

Checkmarx

Fortify

Nessus

Veracode

IBM AppScan

AppScan Source

Job description

• To lead the Applications Security Testing related activities, providing technical assessment of scope, principal security concerns and testing methodology to relevant stakeholders.
• Conduct Static Application Security Testing(SAST) Scans and Software Composition Analsys(SCA)
• Perform automated tool scanning
• Execute manual reviews
• Managing DevSecOps pipeline for major customer ensuring strong security measures and standards meeting business requirements.
• Providing security consulting to various teams (design, development) on security measures to be incorporated in the requirements during design, development phases and the best practices to be followed for a secure application development.
• Recommended process improvement to optimize security architecture lifecycle removing silos introducing compliance layer onto the review process.

Experience and Qualifications required

• Has at least 10 years of experience in IT security and preferably in Application security testing and Development.
• Experience in Application Security Assessment, Secure Code Review– DAST & SAST
• Experience in SAST (Static Application Security Testing) tools like IBM AppScan Source, HP Fortify, Checkmarx etc
• Experience to execute on various security tools like Checkmarx, Fortify, Nessus, Veracode, IBM appscan etc.
• Expert in secure programming Coding for the languages like java, C,C++, .Net, python etc.
• Expert in Security Frameworks to protect the applications from various attacks
• Has excellent written and verbal communications skills and able to work with technical experts in the industry as well as able to connect with business stakeholders at a non-technical level

NLB Services is an Equal Opportunity Employer. All qualified applicants will receive consideration without regard to any legally protected characteristic, including disability and protected veteran status. For recruitment accommodations, contact your recruiter or [e-mail].