Application Security Engineer

At ST Engineering iDirect, Application Security Engineer continually work with other technical staff to provide a secure approaches, and enhancements for both current systems and next generation products.

Application security engineer is to assess security of code development by automated security testing and work with software development teams to ensure that proper security controls are designed and implemented within applications by providing security code review. As an ideal candidate, you like working as part of an international team that is spread across multiple locations including the USA (Virginia), Canada, and Europe (Belgium, Germany, Ireland). An ideal candidate will have prior experience in the role of an application security engineering or application security analyst or similar role in a software development organization.

• Ability to communicate clearly and concisely, both orally and in writing
• Ability to distill and present information to the larger organization and customers in non-technical terminology when required.
• Ability to perform automated and/or manual code reviews, a functional and system level code reviews, assist threat modeling activities in security architecture team.
• Ability to perform implementation of integrated application security solutions and conduct security risk analysis of projects and documenting application security standards, guidelines and procedures.
• Ability to work in a group development environment as an application security engineer across software engineer, QA engineer and build/test/release engineer teams.
• Ability to set priorities and meet deadlines
• Strong organizational skills, customer service focus, attention to detail, and process orientation
• Serve as the subject matter expert (SME) on application security (AppSec) domain knowledge.
• Participate in both internal and external working group that tailor to the company’s product security policies and standards for use in product development/production environment.
• Participate in both internal and external security automation proofs of concept (PoC) while maintaining a high security maturity posture.

• Prior experience in deploying/maintaining/supporting/analyzing DAST/SAST scan results.
• Prior experience deploying automated on-perm and Cloud security infrastructure is required.
• Experience in software development of an application using either C, C++, Java, or Python in a QA, test automation environment.
• Prior experience with securing software development lifecycle (SSDLC).
• Strong understanding of security in both Web Application and Web service architecture.
• Experience building automation scripts in Bash, Ruby and Python.
• CISSP or cloud security related certifications are a plus.