Senior Application Security Engineer

ASM Research, An Accenture Federal Services Company; Oklahoma City (OK); On-site; USD 110,000 - 189,000; Full time

Job summary

ASM Research evaluates application security across the software development lifecycle, defining best practices and reviewing architectures to remediate vulnerabilities in multiple languages and platforms.

They collaborate with development, Web, network, and security teams to drive security improvements, perform penetration tests, and train developers on secure coding and security protocols.

Qualifications

• Bachelor’s degree or equivalent practical experience in computer science or related field.
• 5–10 years of experience as Application Security Developer/Analyst or equivalent.
• Expertise with application server technologies and security concepts.
• Experience with static code analysis tools and web security vulnerabilities.

Responsibilities

• Evaluate application security throughout the software development lifecycle.
• Define and enforce application security best practices across projects.
• Perform architecture and design reviews for security.
• Identify, analyze, and remediate vulnerabilities across languages and platforms.
• Lead vulnerability assessments and penetration testing.
• Provide mitigation recommendations and train developers on secure code development.

Skills

Spring Framework

Spring Security

Web Services REST

Hibernate

RBAC

SAML

LDAP

XSS

SQL Injection

CSRF

OWASP Top 10

BurpSuite

GIT

Unix/Linux

JavaScript

NodeJS

Jenkins

Gradle

Vagrant

Chef

Education

Bachelor’s Degree in Computer Science, Engineering, or other Engineering or Technical discipline or equivalent relevant experience

Tools

HP Fortify

Job description

ASM Research evaluates application security across the software development lifecycle, defining best practices and reviewing architectures to remediate vulnerabilities in multiple languages and platforms.

They collaborate with development, Web, network, and security teams to drive security improvements, perform penetration tests, and train developers on secure coding and security protocols.