Application Security Engineer - Fort Worth, United States - Insight Global

Description

Location: Fort Worth - Hybrid Schedule

Pay Range: $50-$65/HR

Technical Skills:

• Secure Coding Practices: A strong understanding of secure coding principles and best practices is essential. This includes knowledge of common vulnerabilities and how to avoid them during development.
• Web Application Security: Expertise in web application security testing methodologies like OWASP Top 10 and experience with relevant tools (e.g., Burp Suite, ZAP) is highly desirable.
• API Security: Understanding of API security principles and the ability to perform API security testing is increasingly valuable.
• Security Automation: Familiarity with security automation tools and scripting languages (e.g., Python, Bash) can significantly improve efficiency.

Experience and Qualifications:

• Bachelor's Degree in Computer Science or related field: A relevant degree demonstrates a foundation in computer science principles.
• Experience in Application Development: Understanding the software development lifecycle (SDLC) and experience working with developers is crucial. Having skills and an understanding in Threat Modeling and vulnerability remediation recommendations.
• Security Certifications: While not mandatory, certifications like Certified Ethical Hacker (CEH) or Offensive Security Certified Professional (OSCP) demonstrate commitment to security and technical skills.

Problem-Solving and Communication:

• Analytical Thinking: The ability to analyze code, identify vulnerabilities, and propose effective remediation strategies is essential.
• Communication Skills: Strong written and verbal communication skills are necessary to collaborate with developers, explain technical concepts clearly, and document findings effectively.
• Teamwork: The ability to work effectively within a team environment, collaborating with developers, security analysts, and other stakeholders.

Additional Considerations:

• Scripting and Programming Skills: While not always required, scripting and programming skills can be valuable for automating security testing tasks.
• Cloud Security Knowledge: If your organization utilizes cloud platforms, experience with cloud security best practices and tools is beneficial.
• Passion for Security: Look for a candidate who demonstrates a genuine interest in application security and staying current with evolving threats.