Application Security Engineer 9+

Job Title: Application Security Engineer

Location: Houston, TX Remote

Years of Experience: 9- 10 Years

Job Summary

We are seeking an experienced Application Security Engineer to join our team. The ideal candidate will have a strong background in application security concepts and practices, with a focus on implementing and maintaining secure server baselines, conducting security assessments, and managing identity and access controls. This role requires a proactive approach to identifying and mitigating security risks across various platforms and applications.

Responsibilities

• Implement and maintain secure server baselines (Windows, Linux, Cloud) aligned with CIS Benchmarks and security standards.
• Conduct Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) assessments for in house and third party applications.
• Identify, prioritize, and coordinate remediation of vulnerabilities across applications, APIs, databases, and infrastructure.
• Manage Identity & Access Management (IAM), including privileged access, service accounts, API keys, and Multi Factor Authentication (MFA).
• Investigate and respond to server and application security incidents.
• Integrate security controls into Continuous Integration/Continuous Deployment (CI/CD) pipelines, including container scanning and secrets management.
• Ensure security logs, Endpoint Detection and Response (EDR)/Host Intrusion Detection System (HIDS) telemetry, and application events are integrated with the Security Information and Event Management (SIEM) system.
• Review server, application, Docker, and Kubernetes configurations to identify and mitigate security risks.
• Support patch management, security reviews, threat modeling, and secure release processes.
• Develop security standards, procedures, and technical documentation; provide risk based recommendations to stakeholders.

Mandatory Skills

• Strong understanding of application security concepts and practices.
• Experience with SAST, DAST, and SCA tools.
• Proficiency in managing AWS IAM Idaas solutions and practices.
• Experience with CI/CD Pipeline tools and integrating security into the development lifecycle.
• Familiarity with security logging and monitoring tools, particularly SIEM.

Preferred Skills

• Experience with cloud security practices and tools.
• Knowledge of Docker security and Kubernetes.
• Familiarity with Threat Modelling methodologies.
• Experience with security frameworks and compliance standards (e.g., NIST, ISO 27001).

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 9- 10 years of experience in application security or related fields.
• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Application Security Engineer (CASE) are preferred.
• Strong analytical and problem solving skills.
• Excellent communication and collaboration skills.