Application Security Engineer-Whitehouse Station, NJ - Georgia IT Inc

    Georgia IT Inc
    Georgia IT Inc Whitehouse Station, United States

    2 weeks ago

    Default job background
    Description

    Application Security Engineer

    Location:
    Whitehouse Station, NJ.Hybrid Schedule to WHS 3/2.


    Duration: 3 months CTH

    Job description


    Job Description:


    We are looking for an Application Security specialist with 7 years of extensive experience & knowledge in developing security solutions & providing governance for both cloud and on-premise applications.

    The individual will possess a strong understanding of application technology stack, development methodologies and secure development controls. He will also possess a keen eye for detail and be able to identify security issues in application architecture.

    Essential Functions


    • Work with Enterprise Architecture teams to conduct application design reviews. Identify threats and potential security issues and help the teams with practical secure control recommendations
    • Develop security metrics & measurement capability to demonstrate application security and SDLC security activities
    • Provide technical security leadership to app dev architects and software developers for secure software development using both agile and traditional waterfall methodologies
    • Stay current with attacks, industry trends and threat mitigation measures in the application security space
    • Communicate timely and accurately - project related security risks and countermeasures to information to relevant parties
    • Seeks for innovation and creativity in security solutions
    Required Skills/Experience


    • Good knowledge of OWAP Top 10, SANS CWE top 25 and other application level risks and attacks
    • Good knowledge Hi of Secure Design Review and Threat Modeling methodologies
    • Experience in HTML, Java, JavaScript, and .Net,
    • Experience with Web Services security (REST, SOAP, XML, etc.)
    • Experience with API gateways and authentication protocols such as OAuth, OpenID Connect and SAML
    • Familiarity with Cloud security controls for SaaS, IaaS, and PaaS
    • Familiarity with container technologies such as Docker, Kubernetes.
    • Familiarity with DevOps processes & principles.
    • Strong written and oral communication skills.