Application Security Engineer

The candidate must have strong experience in application security assessment. threat modeling, code review, static and dynamic testing.

The candidate must have a strong understanding of common security libraries, security controls, and common security flaws.

Candidate must have experience in performing application vulnerability Management, penetration testing, application & API security assessment.

Candidate must have experience with OWASP, static/dynamic analysis, and common security tools

Candidate must have basic knowledge of development or scripting experience

Candidate must have experience in identifying security issues through code review during entire SDLC cycle

A basic understanding of network and web-related protocols (such as TCP/IP, UDP, HTTP, HTTPS, protocols)

Experience in working with developers

Candidate must have good communication skills (written & verbal)

He / She will be responsible for performing application security assessment, code review, API security assessment.

Participate in and support application security reviews and threat modeling, including code review and static/dynamic testing.

Ensure that security across all aspects of the software is uniform by setting up checkpoints.

Perform threat modeling for applications to determine the potential threats and vulnerabilities to an application and identify points where applications are most vulnerable.

Based on assessment results explore the threats that each application is exposed to and ranks them on a severity scale

Recommend the countermeasures that could be developed to secure application

He / She need to facilitate and support the preparation of security releases

He / She needs to support product and development teams in the area of application security.

Assist in the creation of best security development practices and security training for developers

Skills

He / She must have 5 + Years of experience in Application security assessment & application vulnerability management with strong academic background.

Ability to stay current with emerging threats, security risks, and potential impacts to the business.

Should have strong exposure to application security assessment, code review, secure development practices, and application security tools & technologies.

Candidate should have at least one Information security certification CEH, CASE, or CISSP