Application security engineer

Job Title: Application security engineer Location: Remote Responsibilities: Incorporate compliance and security into CI/CD pipelines following the shift-left paradigm Configuring and tuning application security testing solutions Designing and implementing continuous monitoring and authorization processes into pipelines Providing DevSecOps guidance to customer teams Confirming that the CI/CD platform is meeting security control requirements Requirements: Degree in Computer Science or a related technical field involving software development, or equivalent experience 5 years of experience in operation of production systems, including troubleshooting, testing, and automation. Experience with algorithms, data structures, analysis, and software design Experience in C#, Java, or Python Experience consulting with customers or leading projects to achieve defined outcomes Experience with network and application protocols (e.g., TCP/IP, TLS, HTTP). This should include understanding of the internal workings of common protocols Experience with databases, including RDBMS (MySQL/MariaDB, MS SQL, Oracle) and columnar or NoSQL store (MongoDB, Redis, Casandra, DynamoDB) Experience with web application security testing tools (e.g., Burp, ZAP, Qualys, Netsparker) Experience with static code analysis tools (e.g., SonarQube, CheckMarx, Coverity, Security Code Scan, Flawfinder, Gosec, SpotBugs, Kubesec, Semgrep, MobSF) Experience with package/container vulnerability scanning tools (e.g., Black Duck, JFrog X-Ray, Trivy, Twistlock/Prisma) Understanding of secure coding practices and with helping teams to adopt them (e.g., OWASP, SSDF) Experience designing quality gates into CI/CD pipelines Thanks&Regards, Kiran Tumuluri IT-Recruiter Staffing | Thought wave Software and Solutions Limited 6308125139kiran@thoughtwavesoft.com www.thoughtwavesoft.com 314 N. Lake St, Suite 6, Aurora IL 60506