Application Security Engineer

Job Title: Application security engineer Location: Remote Business Overview: Purpose: The application security engineer shall have extensive experience in the involvement and understanding of cloud security controls (security-as-code) and target cloud infrastructure Google Cloud Platform (GCP). Must be proficient in reading, writing, analyzing and assessing Terraform code/scripts and conducting security code-reviews Position Overview: Daily Responsibilities/Job Description: Reading, writing, analyzing and assessing code/scripts for security vulnerabilities. Running various application security testing tools and interpreting their findings This position will focus on reviewing the current security-as-code infrastructure and the security of applications deployed in GCP. This position will have an in-depth understanding of CI/CD development processes, tools and technologies and will be responsible for promoting security code changes through the CI/CD pipeline. This position must have a solid understanding of python, git, and other development languages is necessary. This role will also require that the individual be familiar with current and emerging cloud technologies and tools. Skills Overview: Qualifications/years of experience: 3-5yrs Experience working with: application development tools and practices Automation, CI/CD tools Integrating security into application development (e.g. code reviews, security testing) Prior Cybersecurity or some Information security experience Must Haves: Reading, writing, analyzing and assessing code in one or more languages (Java preferred) Public (AWS, Azure, GCP) or private cloud (VMware, Dell/EMC) IaaS/PaaS/aPaaS experience Familiarity with application security issues and mitigation (e.g. OWASP Top 10) Familiarity with security concepts (Risk management, vulnerabilities, threats) Nice to Haves Requirements: Experience with Google Cloud Platform, Hashi Sentinel Policy, Cloud Formation, Amazon Web Services Atlassian tools (ex: Confluence, JIRA), Git (ex: BitBucket, Github), Testing and test automation (ex: Selenium, Mockito), CI/CD (ex: Jenkins, GitHub Actions) Ansible, Terraform, CloudFoundry, Kubernetes, Docker, IaC Additional Requirements: Soft Skills Needed: Good communication and documentation skills Team player and collaborative Accountable and willing to tackle new challenges Good researching skills Critical thinking and problem solving Best vs Average Worker: Experienced (high performer) Performance Measurements: Meeting deadlines, quality of work, collaboration with others Thanks&Regards, Kiran Tumuluri IT-Recruiter Staffing | Thought wave Software and Solutions Limited 6308125139kiran@thoughtwavesoft.com www.thoughtwavesoft.com 314 N. Lake St, Suite 6, Aurora IL 60506