Application Security Engineer

TCWGlobal; San Mateo (CA); Remoto; USD 82.000 - 117.000; Tempo pieno

Descrizione del lavoro

TCWGlobal is seeking an Application Security Engineer for a 6-month contract. The role is fully remote, with pay up to $72.10 per hour.

You will validate SAST/SCA results, investigate vulnerabilities, and work with developers to remediate and embed secure practices into the SDLC. Ideal candidates have 2+ years in software development, hands-on experience with Java/Go/Python/Perl, and a solid understanding of OWASP Top 10 and security architectures.

Competenze

• 2+ years of experience in software development.
• Bachelor’s degree or equivalent experience in a related field.
• Experience with multiple languages (Java, Go, Python, Perl).
• Understanding of OWASP Top 10 and remediation methods.
• Experience with scalable, secure enterprise architectures.
• Experience participating in security architecture and feature design reviews.
• Strong written and verbal communication skills.

Mansioni

• Partner with software engineers to identify and address security risks across the SDLC.
• Analyze SAST and SCA results to identify potential vulnerabilities.
• Investigate vulnerabilities, assess applicability, and perform risk analysis as needed.
• Configure and fine-tune security scanning tools to improve accuracy.
• Communicate findings to developers and track remediation progress.
• Collaborate with security engineers and development teams to align with release timelines.
• Support security architecture and design reviews to identify risks early in development.
• Evaluate security risks across enterprise architectures and multi-tier systems.

Conoscenze

Software development

Java

Go

Python

Perl

OWASP Top 10

Communication

Security architecture

Formazione

Bachelor’s degree in Computer Science/Information Security/Cybersecurity

Strumenti

AWS

Akamai

Security scanning tools

Descrizione del lavoro

Application Security Engineer

Pay Rate: Up to $72.10/hour

Duration: 6-month contract

Location: Fully Remote

Summary

We are seeking an Application Security Engineer for a contract opportunity ideal for candidates looking to build or advance their careers in application security.

In this role, you will validate static application security testing (SAST) and software composition analysis (SCA) results, investigate potential vulnerabilities, and collaborate with software developers to support remediation efforts. You will work alongside application security professionals and development teams to identify risks, recommend mitigation strategies, and help integrate security practices into the Software Development Lifecycle (SDLC).

What You’ll Do

• Partner with software engineers to identify and address security risks, providing mitigation recommendations throughout the SDLC.
• Analyze application security scanner results, including SAST and SCA findings, to identify potential vulnerabilities.
• Investigate and validate identified vulnerabilities, assess their applicability, and perform risk analysis as needed.
• Configure and fine-tune security scanning tools to improve the accuracy and relevance of results within application environments.
• Communicate security findings to developers and application owners, tracking vulnerabilities through remediation and resolution.
• Collaborate with application security engineers and development teams to align security activities with development schedules and release timelines.
• Support security architecture and feature design reviews to help identify potential risks early in the development process.
• Evaluate application security risks across enterprise application architectures and multi-tier systems.

What You Bring

• 2+ years of experience working within software development.
• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent experience of more than 7 years.
• Experience working with multiple programming languages, such as Java, Go, Python, or Perl.
• Understanding of common application security vulnerabilities, including the OWASP Top 10, and methods for identifying and remediating them.
• Familiarity with enterprise application architectures designed for scalability and reliability, including security considerations.
• Experience participating in security architecture and feature design reviews.
• Strong written and verbal communication skills, with the ability to explain technical concepts to both technical and non-technical audiences.
• High level of personal integrity and sound judgment when handling confidential information and security-related matters.
• Ability to work independently, collaborate effectively with development teams, and manage multiple priorities.

Bonus Points If You Have

• Experience securing hosts, databases, and applications within multi-tier systems.
• Experience with penetration testing.
• Knowledge of automated attack tools and vulnerability mitigation techniques.
• Ability to think like an attacker to identify potential security weaknesses.
• Experience with AWS and Akamai technologies.
• Relevant information security certifications, such as GWAPT, OSCP, or equivalent credentials.
• Strong analytical, evaluative, and problem-solving skills.

TCWGlobal is an equal opportunity employer. We do not discriminate based on age, ethnicity, gender, nationality, religious belief, or sexual orientation.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.