Application Security Engineer

In this role, you will work closely with development teams across platform engineering to ensure our applications are secure. We are looking for a skilled application security engineer to analyze software designs and implementations from a security perspective and identify and resolve security issues. You will perform security analysis and implement controls to ensure we provide robust and reliable software.

Responsibilities:

• Work with app teams to define zero trust templates as part of the engineering lifecycle
• Optimize perimeter defense by tuning WAF policies based on attack vectors and new threats
• Perform on-going application security testing and code review to improve software security
• Provide engineering designs to mitigate security vulnerabilities
• Consult with engineering teams on secure coding practices
• Build strong relationships with platform engineering teams

Requirements:

• 5+ years industry experience in secure software development, with a minimum of 2 years in Internet-scale distributed systems or data platform systems
• 3+ years experience in web application security and SSDLC practices
• Proficient in at least two general programming language such as JavaScript, Python, C/C++, Java, Rust, or Go
• Hands-on experience with databases and query design is a plus
• Excellent engineering-level understanding of web applications, web servers, layer 7 application technologies, frameworks, and protocols
• Superb communication skills, with the ability to influence at all levels of the organization, are essential to success