Application Security Engineer - Charlotte, United States - U.S. Bank

U.S. Bank Charlotte, United States

1 month ago

Show more Collapse job

Description

At U.S. Bank, we're on a journey to do our best.

Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed.

We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential.

A career with U.S.

Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career.

Try new things, learn new skills and discover what you excel at—all from Day One.
Job Description

U.S Bank is seeking an Application Security Engineer that specializes in Vulnerability Management.

This Application Security Engineer will implement, and support solutions/technologies used for Static code analysis (SCA), Dynamic & Static security testing (DAST SAST), Interactive application security testing (IAST) & Pen testing.

The engineer will be leading initiatives to improve application security posture by implementing policies, execute vulnerability management program and evangelizing practices that shift security left.

Top 3 Skills:

Experience with SAST, SCA, and DAST toolset

Experience with Vulnerability Management and Threat Assessment

Development/Automation experience with Java, Python, API & Database Technology

Preferred Qualifications:

Typically Bachelor's degree in engineering or science, or equivalent work experience

Typically three to five years of experience in information security

Typically two or more years of experience in IT infrastructure management, application architecture, risk management, data architecture, middleware technology, and IT operations and project management

Job Duties:
Perform the daily operation and execution of security-related tools, processes and controls related to cyber defense initiatives.
Works with development teams to onboard projects to SAST, OSA, DAST & IAST tools. Collaborates with pipeline/CI-CD/DevOps teamHelp coordinate and drive remediation of identified risks and control deficiencies.
Look for ways to optimize security processes and recommend opportunities and solutions for improvement and automation.

Serve as technical and function subject matter expert across multiple security domain areas, raising awareness and communicating security risks within the company.

Support and participate in incident response and technical investigations as needed.
Ensures adherence to compliance regulations and policies.

Preferred Skills and Experience:

Extensive knowledge of IT environment including service-oriented and IT architecture, industry trends and direction, system and technology integration, and IT standards, procedures and policies, and emerging technologiesHands on experience with Application security toolsets like Fortify, Checkmarx, Synopsis, Fossa, Web Inspect other tools in the space of SAST, SCA, IAST & DASTKnowledge on application, API & mobile security with tools such as data theorem, MTD & MDM is desirable.

Demonstrable experience running vulnerability management and risk management programs across organization and evangelizing best development practices.

Extensive knowledge of software licensing, product and vendor evaluation, technical troubleshooting, and software processing improvementWorking knowledge of IT audit and control, governance, asset management, change control, training delivery, and technical writing/documentation.

Extensive knowledge of information security technologies and administrationWorking knowledge of IT architecture, audits, network and internet security, information assurance, and computer crime.

Development/Automation experience with Java, Groovy, Python, API & SQL Database Technology

This role offers a hybrid/flexible schedule, which means there's an in-office expectation of 3 or more days per week and the flexibility to work outside the office location for the other days.#ISSIf there's anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.

Benefits:

Our approach to benefits and total rewards considers our team members' whole selves and what may be needed to thrive in and outside work.

That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind.

Our benefits include the following (some may vary based on role, location or hours):
Healthcare (medical, dental, vision)

Basic term and optional term life insurance

Short-term and long-term disability

Pregnancy disability and parental leave

401(k) and employer-funded retirement plan

Paid vacation (from two to five weeks depending on salary grade and tenure)

Up to 11 paid holiday opportunities

Adoption assistance

Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law

EEO is the LawU.S. Bank is an equal opportunity employer committed to creating a diverse workforce.

We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, among other factors.

Applicants can learn more about the company's status as an equal opportunity employer by viewing the federal

KNOW YOUR RIGHTS
EEO poster.
E-VerifyU.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services. Learn more about the E-Verify program.
The salary range reflects figures based on the primary location, which is listed first. The actual range for the role may differ based on the location of the role. In addition to salary, U.S.

Bank offers a comprehensive benefits package, including incentive and recognition programs, equity stock purchase 401(k) contribution and pension (all benefits are subject to eligibility requirements).

Pay Range:
$102, $120, $132,440.00 Job postings typically remain open for approximately 20 days of the posting date listed above, however the job posting may be closed earlier should it be determined the position is no longer required due to business need. Job postings in areas with a high volume of applicants, such as customer service, contact center, and Financial Crimes investigations, remain open for approximately 5 days of the posting listed date.
#J-18808-Ljbffr

We have other current jobs related to this field that you can find below

Security Engineer

6 days ago

TEKRRA1 Charlotte, United States

Job Description · Job DescriptionRequirements: · Engage in security consultation for internal projects to ensure alignment with corporate security policies and standards. · Monitor and address vulnerabilities and security incidents. · Analyze security logs for potential threats ...
Security Engineer

1 week ago

CommScope Charlotte, United States

Security Engineer · Req ID: 76788 · Location: · Charlotte, North Carolina, United States · In our 'always on' world, it's essential to have a genuine connection with the work you do. · Are you prepared for a unique challenge? Are you driven by continuous learning and growth? ...
Security Engineer

2 days ago

VorTek Systems Charlotte, United States

Responsibilities · Includes, but not limited to: · Provide expertise on Security Operations product and services to our customers · Proactively identify customer needs and requirements through data, customer engagement and other methods to recommend appropriate solutions and d ...
IT Security Engineer

1 week ago

Albemarle Charlotte, United States

REQ-25655 · Be an essential element to a brighter future. · We work together to transform essential resources into critical ingredients for mobility, energy, connectivity and health. Join our values-led organization committed to building a more resilient world with people and p ...
Security Engineer

2 days ago

CommScope Charlotte, United States

In our 'always on' world, it's essential to have a genuine connection with the work you do. · Are you prepared for a unique challenge? Are you driven by continuous learning and growth? Joining CommScope's cybersecurity team offers a distinctive opportunity for you. As a Security ...
Security Engineer

2 weeks ago

CommScope Charlotte, United States

· In our 'always on' world, we believe it's essential to have a genuine connection with the work you do. · Are you prepared for a unique challenge? Are you driven by continuous learning and growth? Joining CommScope's cybersecurity team offers a distinctive opportunity for you. ...
Cyber Security Engineer

2 weeks ago

Matlen Silver Charlotte, United States

Company: Ally · Job Title: Cyber Security Engineer · Compensation: Up To $74/Hour (Based on experience) · Hybrid: Three (3) Days Onsite · Location: Charlotte, NC · Position Description · The Cyber Security Technology Engineer position at Ally is a member of the Information Protec ...
Network Security Engineer

2 weeks ago

Vivid Resourcing Charlotte, United States

Freelance Network Security Engineer: · My client, based in Central Charlotte, NC is urgently searching for a Network Security Engineer to join their team on a long term basis - please apply via LinkedIn or forward your resume to · What You'll Do: · You will work on the Network S ...
Information Security Engineer

4 days ago

Motion Recruitment Charlotte, United States Contract

Outstanding long-term contract opportunity A well-known Financial Services Company is looking for a Information Security Engineer in Charlotte, NC or Chandler, AZ (Hybrid). · Work with the brightest minds at one of the largest financial institutions in the world. This is long-ter ...
Cloud Security Engineer

2 days ago

Optomi Charlotte, United States

Cloud Security Engineer (Azure) - Charlotte, NC · Optomi, in partnership with a leading enterprise energy provider, is seeking a Cloud Security Engineer for a hybrid opportunity local to Charlotte, NC. You will be responsible for designing, implementing, and monitoring security s ...
Network Security Engineer

4 weeks ago

Tata Consultancy Services Charlotte, United States

Must Have Technical/Functional Skills · Industry-related experience as a Senior Network Engineer or Network Administrator · Solid background in network administration and architecture · In-depth understanding of communication protocols (mainly TCP/IP), web traffic encryption/dec ...
Information Security Engineer

3 weeks ago

CrossCountry Mortgage Charlotte, United States

Description · Position Overview: The Information Security Engineers will play a vital part in protecting the organization's digital assets and infrastructure from evolving cyber threats.The Information Security Engineers will work as a team to cover every aspect of IT security.I ...
Cloud Security Engineer

2 days ago

Optomi Charlotte, United States

Cloud Security Engineer (AWS) - Charlotte, NC · Optomi, in partnership with a leading enterprise energy provider, is seeking a Cloud Security Engineer for a hybrid opportunity local to Charlotte, NC. You will be responsible for designing, implementing, and maintaining security so ...
Network Security Engineer

2 weeks ago

Apex Systems Charlotte, United States

Network Security Engineer · Location: Charlotte, NC (3x/week onsite) · Client: Large financial services company · Pay Rate Range: $54/hr · Contract Length: 24 months with potential to extend or convert · Project Description: Positions are required to quickly address or migrate B2 ...
Senior Network Security Engineer

2 days ago

Enpro Inc. Charlotte, United States

Senior Network Security Engineer (hybrid) · Enpro is currently seeking a Senior Network Security Engineer to join our corporate Information Security Team based in Charlotte, NC. The selected candidate will be responsible for monitoring and securing the IT and OT network environm ...
Network Security Engineer

1 week ago

Artmac Soft LLC Charlotte, United States

Job Description · Job DescriptionWho we are · Artmac Soft is a technology consulting and service-oriented IT company dedicated to providing innovative technology solutions and services to Customers. · Job Description: · Job Title : Network Security Engineer · Job Type : C2C/1099 ...
Network Security Engineer

2 weeks ago

Digital Technology Solutions Charlotte, NC, United States

DTS is looking for Network Security Engineer for our direct client position based in Charlotte, NC · Job Description: · We are seeking a highly skilled and experienced Senior Network Security Engineer to join our team. The ideal candidate will have a strong focus on Palo Alto fir ...
Cyber Security Technology Engineer

2 weeks ago

Avacend Inc Charlotte, United States

Onsite in Charlotte or Detroit for Hybrid model 3 days a week. ** Cyber Security Technology Engineer**: **Windows Installer - Deep understanding of Windows Installer and supporting windows packaging technologies.; **PowerShell - Understand PowerShell and can write an enterprise q ...
Information Security Engineer 2

1 week ago

Pinnacle Group Charlotte, United States Contract

Job Description: · Participate in low to moderately complex initiatives and identify opportunity for process improvements within Information Security Engineering. · Review and analyze basic or tactical Information Security Engineering assignments or challenges that require resea ...
Information Security Engineer

1 week ago

Collabera Charlotte, United States

Home · Search Jobs · Job Description · Information Security Engineer · Remote: Charlotte, North Carolina, US · Salary: $62.00 Per Hour · Job Code: · End Date: · Days Left: 29 days, 3 hours left · Apply · Job Description · Job Title: Information Security Engineer · Locat ...