Job Title: Risk & Security Engineer III

Job Location:North Carolina(Remot)

Job Type: Contract

Duration: 4 Months

Key Responsibilities:

• Provide security testing coordination and consultation services to application development teams and other enterprise stakeholders as required for a portfolio of API services, web, and mobile applications.

• Drive the discovery, understanding, and remediation of application vulnerabilities that are found using static code analysis, dynamic analysis, and open source software composition analysis tools.

• Promote a secure-by-design and Agile security culture across *** development teams.

• Enforce compliance with ***'s application security policies and standards.

• Continuously increase the effectiveness (i.e., planning, communication, and execution) of ***'s global application security program.

Essential Business Experience and Technical Skills:

Required:

• Bachelor's degree in Computer Science, Cyber Security, Information Systems, or related discipline.

• 6+ years of combined experience in software development or application security testing and program management.

• Experience with static code analysis, dynamic analysis, and open source composition analysis using managed security testing platforms and application ethical hack testing.

• Conversant in the SANS/CWE Top 25 and the OWASP Top 10 as well as API security testing best practices and remediation.

• Strong technical communication skills to effectively and succinctly, convey vulnerability flaw details and a recommendation for remediation to developers and leadership.

Preferred:

• Professional certifications such as CSSLP, CEH, OSCP, or a SANS certification.

• Ability to perform secure code reviews. Programming language proficiency in Java, JavaScript, C#, Python, or GoLang.

Tailored Management

New Jobs

Information Security Analyst