Sr. Security Platform Engineer

Novacoast; United States; Remote; USD 80,000 - 100,000; Full time

Job summary

An innovative staffing agency is seeking a Sr. Security Platform Engineer for a remote, long-term contract role with a leading financial organization. This position involves performing vulnerability testing, assisting developers in securing applications, and managing bug bounty programs. The ideal candidate will have extensive experience in cybersecurity, application programming, and risk management. This role promises a dynamic work environment where you will lead security initiatives and collaborate with development teams to ensure compliance with industry standards. If you are passionate about enhancing security measures in a fast-paced setting, this opportunity is perfect for you.

Qualifications

• 5+ years in cybersecurity with a strong focus on application security and compliance.
• Experience in threat modeling and vulnerability assessments.

Responsibilities

• Perform vulnerability testing and document security findings.
• Assist developers with secure coding practices and validation testing.

Skills

Cybersecurity

Risk Management

Application Programming

Vulnerability Testing

Penetration Testing

Java Development

Network Protocols

API Security

Static and Dynamic Scanning Tools

Job description

Novacoast Staffing is currently assisting an enterprise-sized financial organization in its search for a Sr. Security Platform Engineer. This is a remote, long-term contract position with the potential to go Direct hire.

Responsibility Summary:

• Perform and analyze vulnerability testing.
• Document security findings and directly assist developers with reasonable methods to secure.
• Work with developers to provide repetitive validation testing prior to production while allowing for a continuous cycle of development followed by application security assessments.
• Directly assist developers hands-on with code details and assist with mitigation routes.
• Regularly monitor the security community for public-facing security issues.
• Prepare for and manage bug bounty programs. Document delivery and implementation advances that meet defined service-level agreements (SLAs) and business metrics.
• Align with architects and development teams for a mission of secure design.
• Actively participate and lead security team meetings that facilitate secure design.
• Focus on application security that observes compliance –Sarbanes-Oxley Act (SOX), etc. – and other privacy laws.
• Respond to and handle service and escalation tickets within SLA expectations.
• Drive security efficiencies, enabling security team members to work on more advanced tasks.

Requirements

• At least 5+ years experience in cybersecurity, including compliance and risk management security engineering background.
• Highly technical and analytical experience, with a proven deep background (preferred 5+ years in addition to cybersecurity) in application programming/ development. Experience in threat modeling applications.
• Vulnerability and penetration testing skills.
• Excellence in communicating business risk from cybersecurity issues.
• Proficiency in software development (emphasis on Java).
• Solid understanding of network and web protocols.
• Experience with security of intra-company and third-party APIs.
• Experience with dynamic and static scanning tools.

If this sounds like a good match for your next career move, submit your resume today for immediate consideration!