Application Lead - Custom Development

Experience in the following:

• Identifying and remediating application vulnerabilities.
• Cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability,
• authentication, non-repudiation).
• Knowledge on system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site
• scripting, sequel injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
• Candidates should have a thorough understanding and working knowledge of OWASP practices
• Experienced in DevSecOps Tools and Agile Delivery Methodology
• Knowledge on developing applications with security policy/framework
• Leading  scrum teams on how to implement security policies on the applications
• Understanding or knowledge of security scanning tools and utilities such as Qualys, Veracode, Manual Penetration  
• Testing, CAST and implementing scans  in application development cycle
• Knowledge of coding best practices
• Automation Testing and Test Driven Development
• Cryptography and cryptographic key management concepts (optional)
• Ethical hacking principles and techniques. (optional)

Certification Needed:

• Certified Application Security Engineer (CASE)

Mandatory Skills:  

• ColdFusion, PHP, IBM Notes, DevSecOps Tools

Primary Skills Needed:

• 8+ years of experience as Lead using ColdFusion, PHP,  IBM Notes (good to have)