Application Security Engineer

Required Experience:

§  8+ years Information Technology.

§  5+ years in software development role as a Developer, or Architect

§  Java/Web development with strong secure coding background in RHEL and JBoss.

§  3+years with Application Security Engineering conducting assessments, penetration testing, implementing tools for dynamic /automated code review, dynamic and static application scanning (Fortify, SonarQube); consulting on security designs of applications, potential vulnerabilities, and remediation, and creating training materials on key security concepts.

Skills:

§  Strong oral and written communication skills, with a demonstrated ability to communicate complex topics to colleagues, and management.

§  Demonstrated collaboration and teaching abilities.

§  Strong analytical skills. 

§  Identify and resolve problems in a timely manner; gather and analyze information skillfully; develop alternative solutions.

§  Critical thinking and creative problem solving  

Plus:                                CISSP, CEH, CISA, OSCP, OSCE, or OSWE Certifications