| remote || Senior Application Security Engineer || 9 months || video at Remote, Remote, USA |
| Email: [email protected] |
|
http://bit.ly/4ey8w48 https://jobs.nvoids.com/job_details.jsp?id=938876&uid= From: Jyoti Mittal, Tek Inspirations [email protected] Reply to: [email protected] Hello, Hope you are doing well...!! Please check the below job description and let me know if you have any suitable candidate for the same: Job Description - Senior Application Security Engineer 6-9 months Albany, NY Remote Phone/SkypeMust Have Skills : GitHub, GitHub Advanced Security, Jenkins, Docker, EKS/Kubernetes, Amazon Inspector Experience nice-to-have in Splunk, Qualys, AWSApplication security engineers are also responsible for integrating security tools and processes into the DevOps pipeline. This involves automating security checks and scans to identify and fix vulnerabilities early in the development process. By integrating security into the DevOps pipeline (including CI/CD), application security engineers help to ensure that security is not an afterthought but a fundamental part of the software development process. This approach, often referred to as DevSecOps, helps to reduce the risk of security breaches and improve the overall security posture of an organization.Description / Responsibilities Collaborating with Developers and Operations Teams One of the primary responsibilities of an application security engineer is to work closely with developers and operations teams. They play a pivotal role in the software development lifecycle (SDLC), ensuring that security is integrated at every stage. Application security engineers provide guidance to developers on secure coding practices. They also participate in code reviews to identify potential security vulnerabilities and advise on remediation strategies. Furthermore, they collaborate with operations teams to ensure that security measures are effectively implemented in production environments. They also help in designing and implementing secure network architectures. Security Reviews and Threat Modeling Security reviews involve evaluating applications for potential vulnerabilities and non-compliance with security standards. Threat modeling is a proactive approach to identifying potential threats and vulnerabilities in an application. It involves understanding the application's architecture, identifying potential attack vectors, and devising strategies to mitigate these threats. Both security reviews and threat modeling are crucial in ensuring the security of an application from the design phase through to deployment and maintenance. Responding to Security Incidents In the event of a security incident or breach, the application security engineer assists in the response and recovery process. Together with security staff like security operations center (SOC) analysts, they are responsible for investigating the incident, identifying the cause, and implementing measures to prevent similar incidents in the future. Application security engineers also work closely with incident response teams to mitigate the impact of a breach. This may involve coordinating with other IT professionals, communicating with stakeholders, and assisting in the recovery process. Training and Awareness Finally, application security engineers have a responsibility to raise awareness about application security within the organization. They conduct training sessions for developers and other IT professionals on secure coding practices, security standards, and the latest security threats and countermeasures. In addition, application security engineers often play a role in fostering a culture of security within the organization. They promote the importance of security, encourage the adoption of secure practices, and work to ensure that security is considered at every level of the organization. Regards Jyoti Mittal IT Recruiter TEK Inspirations LLC : 13573 Tabasco Cat Trail, Frisco, TX 75035 Email: [email protected] Disclaimer: If you are not interested in receiving our e-mails then please reply with a "REMOVE" in the subject line to [email protected]. And mention all the e-mail addresses to be removed with any e-mail addresses, which might be diverting the e-mails to you. We are sorry for the inconvenience. Keywords: continuous integration continuous deployment information technology New York Texas http://bit.ly/4ey8w48 https://jobs.nvoids.com/job_details.jsp?id=938876&uid= |
| [email protected] View All |
| 09:55 PM 14-Dec-23 |