Application Security Engineer ( 14793609)
Apply NowCompany: Tentek Inc
Location: San Diego, CA 92154
Description:
Application Security Engineer
Key Responsibilities
Qualifications
Key Responsibilities
- Collaborate with engineers to address security risks and provide mitigation recommendations within the Secure Development Lifecycle (SDLC).
- Perform hands-on analysis against static code scan results and software composition scan results of products and services to proactively discover risks and supervise them to resolution.
- High level of personal integrity, with the ability to professionally handle confidential matters, and reflect appropriate level of judgment as it pertains to security.
- Collaborate with other application security engineers to align tasks with product development schedules and complete tasks in every release timing.
Qualifications
- 2+ years' experience working within software development.
- Experience with multiple languages such as Java, Go, Python and Perl etc. and understand how to detect and remedy related security issues such as OWASP top 10.
- Experience with Penetration Testing.
- Knowledge of automated attack tools and developing mitigation techniques.
- Hacker Mindset and always strives to think like an attacker.
- Experience with AWS and Akamai technologies.
- Experience with securing host, database, and application solutions for multi-tier systems.
- Firm understanding of enterprise class application architectures that are highly scalable and reliable and the expertise to secure them.
- Experience of security architecture and design reviews.
- Excellent written and oral communication skills, as well as social skills including the ability to articulate to both technical and non-technical audiences.
- Able to work both independently as well with development teams and multi-task effectively.
- Excellent analytical, evaluative, and problem-solving abilities.
- A bachelor's degree in Computer Science/Information Security/Cyber Security or equivalent.
- Technical certifications within information security are a plus (CISSP, CCSP, GIAC or equivalents).