Sr. Application Security Engineering

As a Vulnerability Analysis Specialist, you will play a crucial role in ensuring the security of mobile and web applications by monitoring and analyzing vulnerabilities using established scanning tools and processes. Your responsibilities will include reviewing scan results, verifying risk levels, and recommending remediation strategies to application or engineering teams. Key Responsibilities: - Monitor and analyze vulnerabilities in mobile and web applications using established scanning tools. - Review scan results, verify risk levels, and recommend remediation strategies to application or engineering teams. - Contribute to security assessments by participating in risk-based discussions with product owners and third-party engineers. - Help track and prioritize vulnerabilities according to established timelines and business impact. - Maintain scanning profiles and policies by following and applying existing application security scan profiles. - Onboard new applications into scanning services and ensure adherence to brand-wide security standards. - Collaborate on awareness and best practices by supporting training programs for application development teams. - Provide input to engineering teams on secure coding and design principles, referencing frameworks like the OWASP Top 10. - Continuously monitor published vulnerabilities across various applications, operating systems, and databases. Qualifications Required: - Bachelors degree and at least 7 years of combined experience in cybersecurity and/or software development. - Practical understanding of application cybersecurity vulnerabilities and experience planning remediation efforts. - Awareness of compliance and data privacy regulations such as PCI DSS, GDPR, CCPA. - General knowledge of common programming languages and paradigms. - Understanding of cloud environment security concepts, CI/CD build/deployment pipeline technologies. - Experience with application scanning tools (dynamic and static techniques) to interpret vulnerabilities. - Familiarity with Docker, Kubernetes, and package management tools for operating systems or development languages. As a Vulnerability Analysis Specialist, you will play a crucial role in ensuring the security of mobile and web applications by monitoring and analyzing vulnerabilities using established scanning tools and processes. Your responsibilities will include reviewing scan results, verifying risk levels, and recommending remediation strategies to application or engineering teams. Key Responsibilities: - Monitor and analyze vulnerabilities in mobile and web applications using established scanning tools. - Review scan results, verify risk levels, and recommend remediation strategies to application or engineering teams. - Contribute to security assessments by participating in risk-based discussions with product owners and third-party engineers. - Help track and prioritize vulnerabilities according to established timelines and business impact. - Maintain scanning profiles and policies by following and applying existing application security scan profiles. - Onboard new applications into scanning services and ensure adherence to brand-wide security standards. - Collaborate on awareness and best practices by supporting training programs for application development teams. - Provide input to engineering teams on secure coding and design principles, referencing frameworks like the OWASP Top 10. - Continuously monitor published vulnerabilities across various applications, operating systems, and databases. Qualifications Required: - Bachelors degree and at least 7 years of combined experience in cybersecurity and/or software development. - Practical understanding of application cybersecurity vulnerabilities and experience planning remediation efforts. - Awareness of compliance and data privacy regulations such as PCI DSS, GDPR, CCPA. - General knowledge of common programming languages and paradigms. - Understanding of cloud environment security concepts, CI/CD build/deployment pipeline technologies. - Experience with application scanning tools (dynamic and static techniques) to interpret vulnerabilities. - Familiarity with Docker, Kubernetes, and package management tools for operating systems or development languages.