Remote Application Security Engineer II
About the position Responsibilities • Lead the execution of security scans on applications and infrastructure, ensuring timely identification of vulnerabilities. • Take ownership of the vulnerability management program, ensuring continuous monitoring, reporting, and remediation of security risks. • Run static code analysis tools (e.g., Checkmarx) and collaborate with development teams to address security findings. • Manage and enhance application security tools and processes, integrating them into CI/CD pipelines and broader infrastructure operations. • Monitor web technologies, such as REST API services, for security vulnerabilities, and apply mitigations as needed. • Write and maintain scripts (Python, C#, JavaScript) to automate security checks and enhance security controls. • Serve as the point of contact for security incidents, managing detection, response, and post-incident analysis. • Regularly review and update security policies, standards, and documentation. • Collaborate with cross-functional teams to ensure security best practices are embedded throughout the software development lifecycle. • Stay informed about the latest security trends, vulnerabilities, and threats, and apply this knowledge to improve security processes. • Mentor and support junior engineers (Level 1) in day-to-day security tasks. Requirements • Minimum 3-5 years of experience in application security or related roles. • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent work experience). • Strong experience with vulnerability management tools and processes. • In-depth knowledge of web technologies, including REST API services, and related security vulnerabilities. • Proficient in running static code analysis tools such as Checkmarx or equivalent. • Strong scripting abilities in Python, C#, and JavaScript, with an emphasis on automation and security tasking. • Advanced understanding of security monitoring, incident response, and risk management. • Strong organizational and multitasking abilities in a fast-paced, dynamic environment. Nice-to-haves • Industry certifications such as CISSP, CEH, or similar are preferred. Apply tot his job