Application Security Engineer (Hybrid - US) - Remote

Overview

An Application Security Engineer will be hands-on performing day-to-day application security and compliance activities. The role requires collaboration with multiple business units and a commitment to professionalism and high ethical standards.

In Short

• Manage security related tasks in the SDLC.
• Interpret and explain compliance-related changes to code base leads.
• Collaborate with software developers and code base leads.
• Participate as a SME in security architecture and design reviews.
• Recommend application security improvements based on best practices.
• Review architecture and compliance-related code changes.
• Manage API Security and vulnerability scans.
• Train IS staff on security best practices.
• Ensure compliance with policies and standards.
• Manage security related tickets and recommendations.

Requirements

• Minimum 3 years of hands-on application security experience.
• Experience securing web application frameworks.
• Familiarity with security frameworks like NIST-800-53/SOC 2.
• Excellent verbal and written communication skills.
• Strong organizational and analytical skills.
• Ability to prioritize tasks according to severity.
• Experience with Django/Python preferred.
• Proficient in AWS Security services.

Benefits

• Generous retirement package.
• Medical, dental, and vision insurance.
• Employee Stock Ownership Plan (ESOP).