Application Security Engineer

Location: Carnot-Moon, PA Description: Our client is currently seeking a Application Security Engineer

• Infrastructure Security Engineer
  Duties:
  Assist in evaluating, planning, configuration, and implementation of new/existing security applications/tools
  Systematically address application security issues and develop secure coding practices for multiple development teams
  Integration of application authentication, encryption, authorization, and access control
  Provide mitigation strategies for applications from secure coding perspective
  Utilize application security scanning tools such as Burpsuite/Fortify to interpret reports and validate identified vulnerabilities and associated risks
  Utilize source code scan tools such as Fortify to assist application development teams to apply the best practice for application security and catch potential vulnerabilities at early stage
  Requirements:
  Extensive experience in addressing web application security issues, such as those outlined in OWASP Top 10
  Strong knowledge of application security throughout the software lifecycle
  Experience developing secure coding practices with C#, Asp.Net (MVC and WebForms), HTML/CSS, Sql Server
  Strong knowledge and experience in securing an application's integration with relational database management systems such as MS SQL
  Proven ability to ensure applications are secure throughout the software lifecycle
  Ability to perform manual and automated testing to identify vulnerabilities such (BurpSuite Pro, Fiddler, Netsparker, etc.)
  Knowledge of security in both Linux and Windows environments as it pertains to Web application hosting, middleware (IIS, Apache, Tomcat, PHP, ColdFusion, Ajax), and databases (Oracle, MySQL, MS SQL Servers)
  Software Security Certifications, such as Certified Secure Software Lifecycle Professional (CSSLP) is a big plus
  Excellent communication skills including presentation and documentation.
  Strong capability in evaluating application security related products
  Education:
  A Bachelor's degree in Computer Science or related engineering field with training in software security.
  Experience:
  Strong software engineering background with extensive experience working in complex enterprise environments Kubernetes and containerization. Our code base is all .NET Core.
  implementing software development lifecycles
  Experience in HTML, CSS, and JavaScript]