Sr. Application Security Cloud Engineer #9647

Professional Recruiters; Sandy (UT); On-site; USD 130,000 - 180,000; Full time

Job summary

The Bank in Sandy, Utah is seeking a Sr. Application Security Cloud Engineer to join our security engineering team. You will bridge security and development, shaping secure SDLC practices and cloud security across applications.

Responsibilities include threat modeling, performing web app assessments, and guiding engineering on secure design. A BS in CS and hands-on testing, cloud security knowledge, and OWASP familiarity are required; advanced certifications are a plus.

Qualifications

• BS in Computer science or equivalent experience.
• Experience in web application security testing (assessment/penetration testing).
• Cloud security knowledge.
• Familiarity with OWASP guidelines.
• Knowledge of agile and secure SDLC.

Responsibilities

• Act as liaison between Security and software development teams.
• Assist development teams implementing secure SDLC practices.
• Threat model web applications and work with development team throughout the SDLC.
• Perform web application vulnerability assessments and penetration tests.
• Provide security and compliance requirements for software development projects.

Skills

Web application security testing

Cloud security knowledge

OWASP guidelines

Agile & secure SDLC

Network/Web protocols (HTTP/S, TCP/IP,

Education

BS in Computer science or equivalent experience

Tools

Python

Shell

Java

JSON

Jira

Job description

Sr. Application Security Cloud Engineer -- Sandy, Ut.

The Bank and its subsidiaries have helped innovative companies and their investors move ambitious ideas forward, fast. The Bank Financial Group's businesses, including The Bank, operate at the intersection of innovation and capital, and provide a comprehensive range of financial services including commercial banking, investment solutions, research and insights, funds management and private banking and wealth advisory. The Bank helps high growth companies in the technology, life science and healthcare, private equity and venture capital, and premium wine industries navigate at every stage. In addition, the company focuses on encouraging positive relationships with firms within the private equity and venture capital community worldwide, many of which are also the firm's clients and may invest in the firm's corporate clients.

Sr. Application Security Cloud Engineer

Position Summary:

Are you excited about security and software development? Are you proficient in broad and deep application security skills and do you enjoy working in a fast-paced environment? Join us at The Bank for an exciting and challenging role.

Responsibilities:

• Act as liaison between Security and software development teams
• Assist development teams implementing secure SDLC practices
• Threat model web applications and work with development team throughout the SDLC
• Perform web application vulnerability assessments and penetration tests
• Provide security and compliance requirements for software development projects

Required Qualifications:

• BS in Computer science or equivalent experience
• Experience in web application security testing (assessment/penetration testing)
• Cloud security knowledge
• Familiarity with OWASP guidelines
• Knowledge of agile and secure SDLC

Additional Preferred Qualifications:

• One or more Certifications (CISSP, GWEB, GPEN, GWAPT, OSWE, OSCE, OSCP)
• Software development or scripting experience (Python, Shell, Java, json, Scrum, Jira, etc)
• Familiarity with network and web application protocols (Http, Https, TCP/IP, SAML 2.0, OAuth 2.0, Rest APIs, etc)
• Knowledge or experience implementing SDLC frameworks like OpenSAMM or BSIMM
• Database knowledge