Application Security Engineer
Apply NowCompany: CAPGEMINI ENGINEERING
Location: Montreal, QC H1A 0A1
Description:
Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you'd like, where you'll be supported and inspired by a collaborative community of colleagues around the world, and where you'll be able to reimagine what's possible. Join us and help the world's leading organizations unlock the value of technology and build a more sustainable, more inclusive world.
Job Description
Overall 5+ years of experience and strong in Application Security experience
Roles and Responsibilities:
As an Application Security Engineer (ASE), the candidate is expected to focus on securing software applications throughout their lifecycle, identifying and decreasing vulnerabilities, and ensuring adherence to security best practices and standards.
The following activities to be performed:
Security Design and Implementation:
Designs and implements security measures for applications, considering architecture, coding standards, and deployment environments.
Collaborates with development teams to integrate security into the Software Development Lifecycle (SDLC).
Develops and maintains security policies, procedures, and standards.
Vulnerability Assessment and Remediation:
Conducts security assessments, including code reviews, static and dynamic analysis, and penetration testing.
Identifies and prioritizes security vulnerabilities.
Works with development teams to remediate identified vulnerabilities.
Security Testing and Monitoring:
Oversees regular security testing on applications and systems.
Implements and manages security tools and processes for automated security testing.
Monitors applications for security incidents and vulnerabilities.
Threat Modeling and Risk Management:
Creates threat models to identify potential security threats and vulnerabilities.
Assesses and manages security risks.
Develops and implements security controls.
Education and Training:
Educates and trains developers on secure coding practices and security best practices.
Helps to create a security-conscious culture within the organization.
Staying Up-to-Date:
Keeps up-to-date with the latest security threats, trends, and countermeasures.
Evaluates emerging threats and proposes improvements to security measures.
Documentation and Reporting:
Creates and maintains documentation and metrics relating to application security.
Prepares reports and dashboards to track security performance.
Disclaimer
Capgemini is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.
This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodations do not pose an undue hardship.
Capgemini is committed to providing reasonable accommodations during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.
Click the following link for more information on your rights as an Applicant http://www.capgemini.com/resources/equal-employment-opportunity-is-the-law.
Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.
Applicants for employment in Canada must have valid work authorization that does not now and/or will not in the future require sponsorship of a visa for employment authorization in Canada by Capgemini.
Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.
Job Description
Overall 5+ years of experience and strong in Application Security experience
Roles and Responsibilities:
As an Application Security Engineer (ASE), the candidate is expected to focus on securing software applications throughout their lifecycle, identifying and decreasing vulnerabilities, and ensuring adherence to security best practices and standards.
The following activities to be performed:
Security Design and Implementation:
Designs and implements security measures for applications, considering architecture, coding standards, and deployment environments.
Collaborates with development teams to integrate security into the Software Development Lifecycle (SDLC).
Develops and maintains security policies, procedures, and standards.
Vulnerability Assessment and Remediation:
Conducts security assessments, including code reviews, static and dynamic analysis, and penetration testing.
Identifies and prioritizes security vulnerabilities.
Works with development teams to remediate identified vulnerabilities.
Security Testing and Monitoring:
Oversees regular security testing on applications and systems.
Implements and manages security tools and processes for automated security testing.
Monitors applications for security incidents and vulnerabilities.
Threat Modeling and Risk Management:
Creates threat models to identify potential security threats and vulnerabilities.
Assesses and manages security risks.
Develops and implements security controls.
Education and Training:
Educates and trains developers on secure coding practices and security best practices.
Helps to create a security-conscious culture within the organization.
Staying Up-to-Date:
Keeps up-to-date with the latest security threats, trends, and countermeasures.
Evaluates emerging threats and proposes improvements to security measures.
Documentation and Reporting:
Creates and maintains documentation and metrics relating to application security.
Prepares reports and dashboards to track security performance.
Disclaimer
Capgemini is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.
This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodations do not pose an undue hardship.
Capgemini is committed to providing reasonable accommodations during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.
Click the following link for more information on your rights as an Applicant http://www.capgemini.com/resources/equal-employment-opportunity-is-the-law.
Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.
Applicants for employment in Canada must have valid work authorization that does not now and/or will not in the future require sponsorship of a visa for employment authorization in Canada by Capgemini.
Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.