Application Security Specialist

Posted: posted 23 days ago

Job Description

Key Responsibilities • Secure Coding Governance: Establish, enforce, and monitor adherence to secure coding standards across all software development projects to minimize security risks. • Vulnerability Management: Identify, analyze, and remediate security vulnerabilities in applications, focusing on areas such as network penetration, injection attacks, and other common exploits. • Penetration Testing: Plan and execute comprehensive penetration tests to detect security weaknesses and collaborate with development teams to implement corrective measures. • Technical Leadership: Leverage expertise in security tools and frameworks applicable to Python, Node.js, .NET, Angular, React, and related technologies to support secure software development. • Collaboration and Training: Work closely with cross-functional teams including development, quality assurance, and operations to embed security best practices. Provide training and guidance to enhance security awareness across the organization. • Continuous Improvement: Stay abreast of the latest security threats, trends, and technologies, and continuously improve security policies, tools, and processes.

Required Qualifications and Skills • Technical Proficiency: Strong programming experience with Python, Node.js, .NET, Angular, and React frameworks. • Security Expertise: Comprehensive knowledge of application security principles, including OWASP Top 10 vulnerabilities, network penetration methodologies, injection attacks, and secure software development lifecycle (SDLC). • Security Tools Experience: Proficient in using vulnerability assessment and penetration testing tools such as static and dynamic application security testing (SAST/DAST) tools, security scanners, and related technologies. • Analytical Abilities: Exceptional problem-solving skills with the ability to assess complex security issues and provide effective mitigation strategies. • Communication: Excellent interpersonal and communication skills to interact effectively with technical teams and stakeholders at all levels.