IT Application Security Architect

Jobtailor; Connecticut; On-site; USD 110,000 - 170,000; Full time

Job summary

Jobtailor in Connecticut is seeking a Senior Application Security Engineer to strengthen our software security program. You will assess designs and codebases, conduct threat modeling, and collaborate with development teams to remediate vulnerabilities.

You will perform static and dynamic analysis, run penetration tests, and help shape DevSecOps practices across CI/CD pipelines, cloud platforms, and Azure-based applications.

Qualifications

• Bachelor’s degree in Information Systems or a related technical field or equivalent experience
• 5+ years of applied experience in application security or related position
• Background performing cybersecurity code analysis
• Experience with software composition analysis tools to scan source and binary code for dependency vulnerabilities
• Experience with implementing and using static and dynamic analysis tools
• Experience performing penetration testing is preferred
• Experience using and/or maintaining Checkmarx, Burp Suite, or Contrast preferred
• Experience with DevSecOps
• Experience with automating security operations within CICD workflows preferred
• Experience in writing code using a major programming language is preferred. Specifically, .NET
• Experience with cloud methodology and terminology
• Experience working with cloud-based platforms and applications
• Experience with Azure is preferred

Responsibilities

• Assess the current design and codebase to identify areas for security improvements
• Work with members of project teams to resolve security issues
• Conduct threat modeling for new and existing applications
• Perform security testing such as static code analysis, pentesting, and dynamic application security testing
• Apply a cybersecurity background to perform code analysis when resolving false positives and provide remediation recommendations
• Establish application security requirements based on company standards and industry best practices
• Test and evaluate security tools, and products

Skills

Application security

Threat modeling

Security testing

DevSecOps

Static analysis

Penetration testing

Checkmarx

Burp Suite

Azure

Cloud platforms

CI/CD automation

.NET coding

Education

Bachelor’s degree in Information Systems or related field

Tools

Checkmarx

Burp Suite

Contrast

Job description

Responsibilities

• Assess the current design and codebase to identify areas in need of improvement
• Work with members of project teams to resolve security issues
• Conduct threat modeling for new and existing applications
• Perform security testing such as static code analysis, pentesting, and dynamic application security testing
• Apply a cybersecurity background to perform code analysis when resolving false positives and provide remediation recommendations
• Establish application security requirements based on company standards and industry best practices
• Test and evaluate security tools, and products

Requirements

• Bachelor’s degree in Information Systems or a related technical field or equivalent experience
• 5+ years applied experience in application security or related position
• Background performing cybersecurity code analysis
• Experience with software composition analysis and tools to scan source and binary code for dependency vulnerabilities
• Experience with implementing and using static and dynamic analysis tools
• Experience performing penetration testing is preferred
• Experience using and/or maintaining Checkmarx, Burp Suite, or Contrast preferred
• Experience with DevSecOps
• Experience with automating security operations within CICD workflows preferred
• Experience in writing code using a major programming language is preferred. Specifically, .NET
• Experience with cloud methodology and terminology
• Experience working with cloud-based platforms and applications
• Experience with Azure is preferred