Application Security Lead
New York, NY
Contracted to Full Time
Experienced
Location: Hybrid Onsite 2-3x / Week in New York, NY
Job Type: ~ 1 Year Contract w/Potential for Extension
Job Description:
Our Application Security team acts as a trusted assessor and risk advisor for the application development teams. The team comprises of security engineers with expertise in software security and penetration testing. We are the go-to team to get an attacker’s perspective on any technology and constantly interacts with the numerous Engineering and Software Development teams. Your colleagues will be individuals who are passionate about technology and seek to be at the cutting edge of new cyber attacks, vulnerabilities and security technologies. We are a part of the Information Security pilar within the Global Technology organization.
As an Application Security Lead, you will:
Job Type: ~ 1 Year Contract w/Potential for Extension
Job Description:
Our Application Security team acts as a trusted assessor and risk advisor for the application development teams. The team comprises of security engineers with expertise in software security and penetration testing. We are the go-to team to get an attacker’s perspective on any technology and constantly interacts with the numerous Engineering and Software Development teams. Your colleagues will be individuals who are passionate about technology and seek to be at the cutting edge of new cyber attacks, vulnerabilities and security technologies. We are a part of the Information Security pilar within the Global Technology organization.
As an Application Security Lead, you will:
- Assess security of software projects and improving cloud-based security programs
- Perform vulnerability and penetration testing. Document security findings with reasonable methods to secure.
- Perform threat assessments to identify possible risks and providing security recommendations and advice.
- Coordinate remediation efforts after security assessment findings outline weaknesses requiring attention.
- 7+ years of experience in software security as a practitioner with exposure to vulnerability and penetration testing, threat modeling of applications, and code reviews
- Vulnerability, penetration-testing, and threat modeling skills
- Experience with security of intra-company and third-party APIs
- Experience with dynamic and static analysis tools
- Familiarity with tools such as Git, CI/CD pipelines, Docker, Kubernetes, and experience with scripting languages such as Python
- Familiarity with cloud and container security solutions such as Dome 9 and Aqua Security, or similar
- Network, Web protocols, and encryption experience, including SSL/TLS and public key infrastructure (PKI)
- Strong teamwork, communication skills and attention management abilities
- Bachelor’s, Master’s degree or equivalent in computer science, programming, information security or engineering preferred
- Financial knowledge and interest are recommended
Apply for this position
Required*