Application Security Engineer

San Jose, CA 95002

Posted: 12/06/2023 Job Number: z5G7h3l6a1kMvyS65NP3c3TA2zySN2NPcCRPPBxGXCw= Pay Rate: N/A Hourly USD

Job Description


Job Title: Application Security Engineer

Location: San Jose, CA (Hybrid onsite)

Duration: 6 month cth

 Job Description:
  • Work closely with SecOps team, architecture board to outline standard application security design and proactively fix software and TPS vulnerabilities
  • Participate in all aspects of Secure Software Development Lifecycle
  • Analyse and interpret the results of assessment and test, providing detailed reports that outline identified vulnerabilities, potential impact, and implement remediation strategies
  • Assist in developing and implementing security best practices, standards to enhance the application’s security posture
  • Validate security test plans and automation

 

Qualifications:
  • 7-10 years of relevant experience
  • Hands on experience with the OWASP Top 10 and other security concerns for web applications
  • Should have sound understanding on security related attacks:
  • Code Injection attacks
  • Database/SQL injection attacks
  • Shell Injection attacks
  • Session hijacking
  • Man in the middle attack, DOS attacks
  • CORS, CSRF, XSS etc.
  • Hands on experience with SAST, DAST and SCA scans, interpreting results and providing remediation
  • Deep understanding on how to interpret and asses CVEs (Common Vulnerability and Exposures) as found by scanning tools (Snyk, WIZ etc)
  • Experience in authentication and authorization mechanisms such as JWT, session-based authentication, and role-based access control (RBAC)
  • Track record of staying current with trends, techniques, tools and processes that drive improvement of security posture of applications
  • Knowledge deploying applications to Tomcat
  • Experience working with MySQL.
Apply Online

Send an email reminder to:

Share This Job:

Related Jobs:

Login to save this search and get notified of similar positions.