Application Security Engineer

Eliassen Group; Washington (District of Columbia); On-site; USD 90,000 - 120,000; Full time

Job summary

Eliassen Group is seeking an experienced IT Security Engineer in Washington DC to provide security support for applications across various platforms. The role involves defining security frameworks, conducting penetration tests, and ensuring compliance with security standards.

Ideal candidates will have a college degree in a relevant field and experience in web application development. Join Eliassen Group for a competitive salary and comprehensive benefits while advancing your career in IT security.

Qualifications

• 3-5 years of work experience in IT security.
• 2+ years in web application development.
• 1+ years in application security preferred.

Responsibilities

• Define security frameworks for systems.
• Provide IT security consulting for enterprise projects.
• Support secure application design principles.
• Conduct penetration tests to find vulnerabilities.
• Participate in IT security compliance and audits.

Skills

Web application development in .NET

Java EE

SQL

Web or mobile application security

Security application code review

Knowledge of authentication mechanisms

Incident Response Plans

Education

College degree in relevant field or equivalent experience

Tools

Application Security Firewalls

F5 ASM

Citrix’s Teros

Job description

Demonstrate your expertise and challenge your skills in this exciting IT Security Engineering opportunity! We are seeking an experienced IT Security Engineer for a lead role within our Security Team in our Washington DC IT Department. In this role, you will provide IT security support for applications and software systems in all platforms as well as providing security support to all systems in production, staging and development environments. This Security Engineer role will work closely with Washington DC IT departments and ensures the security and protection of organizational information assets including data, applications, systems, databases, networks, and other resources. We offer a competitive salary and comprehensive benefits, making this a great opportunity for an experienced IT Security Engineer, like you, to take their IT career to the next level.

Job Description

1. Security Engineer works on defining security frameworks for existing and new systems.
2. Represents the IT security team for enterprise projects during development phases like architecture/design review, providing IT security consulting and recommendations, to ensure the implementation of a secure application design.
3. Responsible for supporting the implementation and enforcement of secure application design principles.
4. Responsible for explaining and demonstrating vulnerabilities to application/system owners, and provide recommendations for mitigation.
5. Responsible for defining and designing security code analysis tools and framework, performing code and design reviews of all internal and external software products. Work with application developers to ensure adoption of security principles and best practices.
6. Provides direction and support in security management and security architecture standards and documentation.
7. Provides fault resolution and escalation advice.
8. Responsible for defining processes to manage and enforce application security.
9. Conducts active penetration tests; discover vulnerabilities in information systems.
10. Participate in IT security compliance and audit efforts (e.g., PCI DSS).

Qualifications

• College degree (relevant field) or equivalent experience; 3-5 years of work experience.
• 2+ years of experience in web application development in .NET, Java EE, and SQL.
• 1+ years of experience in web or mobile application security preferred.
• Knowledge of authentication mechanisms like SAML, OAuth, etc. along with web service security protocols for SOAP such as WS-Security are nice to have.
• Knowledge of information security principles, web applications and a level of familiarity with malicious code and common techniques used by hackers.
• Experience with application security code review practices / static analysis and methods, such as OWASP Top Ten.
• Detailed knowledge and understanding of the Payment Card Industry (PCI) data security standards (PCI DSS) as well as experience in the implementation of controls to mitigate PCI issues.
• Experience with Application Security Firewalls, F5 ASM / Citrix’s Teros etc are desirable.
• Experience in creating, maintaining, and executing Incident Response Plans.
• Strong interpersonal and communications skills along with strong customer service skills.
• Knowledge of Security Flaws and its Resolution as listed in sites like OWASP, SANS etc.
• Knowledge and understanding of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, DNS, LTM, GTM) preferred.
• Experience in technical security countermeasures, risk management, contingency planning, and data communications networking preferred.

Additional Information

All your information will be kept confidential according to EEO guidelines.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply.