Application Security Engineer, Plano, Minneapolis, Charlotte, Atlanta, St. Louis

Job: Application Security Engineer

Location at any Client hub, Plano, Minneapolis, Charlotte, Atlanta, St. Louis

Long Term

Submission Requirements

• Application Security with AI AppSec

• SAST / SCA
• Docker HELM Charts
• DevOps / Jenkins
• Gradle
• Programming: Java, Python
• Cloud - AWS/Azure

Position Overview

• This Application Security Engineer will implement and support solutions/technologies used for Static code analysis (SCA) & Static Application security testing (SAST) using industry leading tool.
• The engineer will be leading initiatives to improve application security posture by migrating infrastructure and re-configuring security tool services for Cloud/SaaS platform.

• Manage and support docker container, HELM charts, Rancher and automation with Java, Groovy and Python script.
• Updating and reconfigure build CI/CD jobs to integrate with security tools.
• Will look for ways to optimize security processes and recommend opportunities and solutions for improvement and automation.
• Support and participate in incident response and technical investigations as needed.
• Ensure adherence to compliance regulations and policies.

Work Location

• Is this a remote position? If not, what US Bank locations can a resource work and how many days a week will they be required to work onsite?
• I assume it would be a hub position. NC, TX, MN would be the preference but open to other hub locations as well.
• No remote option

Project / Initiative Summary

• SAST tool migration from on-prem to SaaS - Configuration, pipeline update and testing items are pending on this one.
• BAU / App Sec support - Provide support for dev teams with scan boarding, troubleshoot pipeline issues.
• Automate routine support work along with creating documents for self-service.
• OSA tool migration - Migrate existing projects and teams from one OSA solution to another.

Top Responsibilities

• Update container images
• Assist with Jenkins builds, onboard teams and troubleshoot issues
• Automate support tasks
• Setup, migrate and upgrade App Sec tools for SAST, OSA & DAST

Required Skills / Technologies

• SAST, OSA, DAST
• Jenkins, Gitlab
• Docker container and cloud
• Programming Java, Python & Gradle

Preferred Skills / Attributes

• Threat modelling
• AI AppSec

Interview Process

• How many rounds? 3 Rounds
• HR / Vendor screening, Technical, Hiring manager & Product manager
• Video, phone, or in person? Video
• How technical will the interviews be? 3

Additional Team Information

• Make sure candidates have DevOps, Application Security, AI AppSec and cloud experience