Staff Application Security Engineer

Job Summary

A company is looking for a Staff Application Security Engineer.

Key Responsibilities:

• Improve security development lifecycle investments and maintain security policies and standards
• Perform penetration testing and code reviews of web and mobile applications
• Coordinate vulnerability disclosure program and participate in design reviews and threat modeling

Qualifications:

• 5+ years of experience in implementing security best practices in architecture and code
• 3+ years of experience in driving engineering remediations for externally identified threats and vulnerabilities
• Experience in identifying and remediating security gaps related to authentication, authorization, encryption, etc
• Understanding of regulatory standards such as PCI DSS and SOX
• Full-stack knowledge of IT infrastructure and extensive understanding of AWS services and cloud security controls