Security Engineer

The Role

Vulnerability Analysis:
Conduct thorough reviews of software components to detect security vulnerabilities
Assess third party software libraries and recommend suitable upgrade paths when necessary
Investigate and analyze known vulnerabilities within our software. Identify, compare, and evaluate resolution options, making informed recommendations for remediation
Remediation: Develop, test, and implement patches or solutions to rectify identified vulnerabilities.
Collaboration: Work closely with the Application Security team, Architecture team, DevOps and Infrastructure teams, and other engineering teams to ensure that security fixes are implemented without compromising the functionality or performance of the system.
Security Testing: Use a range of security tools and methodologies to test software for vulnerabilities, including penetration testing, and static code analysis.
Documentation: Maintain detailed documentation of identified vulnerabilities, the underlying causes, and the implemented fixes.
Stay Updated: Continually update knowledge of the latest security threats, vulnerabilities, and mitigation techniques.
Training: Educate software development teams on best practices for vulnerability prevention and remediation.
Feedback Loop: Provide feedback to the software development process to integrate security considerations from the initial stages.

Basic Qualifications

Bachelor’s Degree in Computer Science/related field or equivalent work experience
5+ years of experience in software development
2+ years of application security development
Proficient in Java, with practical experience in developing applications using Vue.js, Angular, JSF 2 and Primefaces.
Demonstrated experience with Hibernate and Java Persistence API (JPA) for database integration.
Strong skills in SQL for database management and queries.
Experience in developing and integrating RESTful APIs.
Proven experience writing Unit and Integration tests.
Proficient in using GIT for version control. Experience in deploying applications both manually and through automated deployment pipelines.

Conditions

Possibilities of a remote role.

Xideral jobs