Senior Application Security Specialist

About the Role

Our client, a pioneer in the software development sector, is seeking a highly skilled Senior Application Security Specialist to join their fully remote engineering team. This crucial role involves embedding security into the software development lifecycle (SDLC) for a wide range of applications. You will work closely with development teams to identify and remediate vulnerabilities, implement secure coding practices, and conduct security testing. The ideal candidate possesses a deep understanding of application vulnerabilities, secure development principles, and the ability to collaborate effectively with distributed teams. This is a prime opportunity to shape the security of innovative software products from anywhere.

Key Responsibilities

• Collaborate with development teams throughout the SDLC to ensure security is integrated from the design phase onwards.
• Perform security reviews of application designs, code, and architectures.
• Conduct security testing, including static application security testing (SAST), dynamic application security testing (DAST), and interactive application security testing (IAST).
• Identify, analyze, and prioritize application vulnerabilities.
• Provide guidance and training to developers on secure coding practices and common vulnerabilities (e.g., OWASP Top 10).
• Develop and implement security tools and processes to automate vulnerability detection and remediation.
• Respond to and assist in the investigation of application security incidents.
• Stay current with emerging application security threats, tools, and techniques.
• Contribute to the development and maintenance of application security policies and standards.
• Act as a security advocate within the engineering organization.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Minimum of 5 years of experience in application security, software development, or a related security engineering role.
• Proven experience in performing security assessments of web applications, APIs, and mobile applications.
• In-depth knowledge of common application vulnerabilities, such as SQL injection, cross-site scripting (XSS), and buffer overflows.
• Familiarity with SAST, DAST, and IAST tools and methodologies.
• Proficiency in at least one programming language (e.g., Java, Python, C#) and understanding of secure coding principles.
• Experience with security best practices for cloud-native applications and microservices architectures.
• Excellent communication and interpersonal skills, with the ability to influence development teams.
• Experience working in an Agile development environment.
• Relevant security certifications such as CSSLP, GIAC-GWEB, or CISSP are a plus.

Benefits

This fully remote position offers a highly competitive salary, comprehensive health and wellness benefits, and a flexible work environment. Our client provides excellent opportunities for continuous learning, professional development, and obtaining industry certifications. Join a forward-thinking company that is dedicated to building secure software and fostering a strong security culture. Enjoy the autonomy and work-life balance of a remote role while contributing to the security of critical applications.

#J-18808-Ljbffr