Application Security Engineer

Purpose: The application security engineer shall have extensive experience in the involvement and understanding of cloud security controls (security-as-code) and target cloud infrastructure Google Cloud Platform (GCP). Must be proficient in reading, writing, analyzing and assessing Terraform code/scripts and conducting security code-reviews Position Overview: Daily Responsibilities/Job Description: Reading, writing, analyzing and assessing Terraform code/scripts. These scripts will be used to define and provision security controls and security infrastructure for Cloud initiatives. This position will focus on reviewing the current security-as-code infrastructure and the security of applications deployed in GCP. This position will have an in-depth understanding of CI/CD development processes, tools and technologies and will be responsible for promoting security code changes through the CI/CD pipeline. This position must have a solid understanding of python, git, and other development languages is necessary. This role will also require that the individual be familiar with current and emerging cloud technologies and tools. Skills Overview: Qualifications/years of experience: 3-5yrs Experience working with: Terraform, python, other application development languages Automation, CI/CD tools Integrating security into application development Qualifications/years of experience: 3-5yrs Experience working with: Terraform, python, other application development languages Automation, CI/CD tools Integrating security into application development Prior Cybersecurity or some Information security experience Must Haves: Reading, writing, analyzing and assessing Terraform code/scripts. These scripts will be used to define and provision security controls and security infrastructure for Cloud initiatives. Public (AWS, Azure, GCP) or private cloud (VMware, Dell/EMC) IaaS/PaaS/aPaaS Nice to Haves Requirements: Experience with Google Cloud Platform, Hashi Sentinel Policy, Cloud Formation, Amazon Web Services, Bitbucket, and Jenkins Atlassian tools (ex: Confluence, JIRA), Git (ex: BitBucket, Github), Testing and test automation (ex: Selenium, Mockito), CI/CD (ex: Jenkins) Ansible, Terraform, CloudFoundry, Kubernetes, Docker, IaC Additional Requirements: See soft skills Success/Performance Metrics: Soft Skills Needed: Good communication and documentation skills Team player and collaborative Accountable and willing to tackle new challenges Good researching skills Best vs Average Worker: Experienced (high performer) Performance Measurements: Meeting deadlines, quality of work, collaboration with others