Job description

The Senior Application Security Engineer will serve as subject matter expert integrating secure design for applications and services within the system development lifecycle. This position collaborates with business units, project management, and engineering teams to deliver secure solutions.

Qualified candidates will have a background in cybersecurity or systems engineering.

In this capacity, the Senior Application Security Engineer will:

• Perform security architecture and design reviews of applications and services;
• Integrate security tasks and activities into system development methodologies (e.g. planning, design, implementation, operations, maintenance, and disposal); and
• Perform validation of security controls to ensure consistency with industry standard methodologies.

In addition, the Senior Application Security Engineer will be expected to have experience with the following areas of responsibility:

• Partner with engineering on development, implementation, and monitoring of security controls for the protection of applications, services and highly sensitive data;
• Perform vendor technical solution acceptance verification and validation;
• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks;
• Assess gaps in existing policy and propose amendments to existing policy or new policy to address these gaps;
• Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement;
• Building threat models for enterprise applications to identify attack vectors and threats;
• Collaborate with engineers, consultants and leadership to address security risks and provide mitigation recommendations within SDLC; and
• Provides guidance and support to self-testing, security control assessment, preparation of remediation plans, and development of continuous monitoring plans.

Qualifications:

• Have minimum of 10 years’ experience (preferred); 8 years of experience with cybersecurity or information assurance (required);
• BS degree in Computer Science or related field (required);
• Strong communication skills with ability to articulate and translate security and risk management terminology in business terms;
• Thorough understanding of the latest security principles, techniques, and protocols;
• Detailed technical knowledge of cloud security, application security, mobile security, and secure development methodologies;
• Hands on experience with security systems, including vulnerability management, identity and access management, security risk assessments, application testing, SAST/DAST, etc.; and
• Strong proven experience providing secure design guidance for diverse applications.

Job Type: Full-time

Pay: $100,000.00 - $181,371.95 per year

Benefits:

• 401(k)
• Health insurance
• Life insurance
• Vision insurance

Schedule:

• 8 hour shift
• Monday to Friday

Ability to commute/relocate:

• Los Angeles, CA 90071: Reliably commute or planning to relocate before starting work (Required)

Experience:

• Cybersecurity: 8 years (Required)
• Information security: 8 years (Required)
• cloud security: 3 years (Required)
• application security: 3 years (Required)
• Mobile security: 2 years (Required)

Work Location: Hybrid remote in Los Angeles, CA 90071

johnandkristie.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, johnandkristie.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, johnandkristie.com is the ideal place to find your next job.