Application Security Engineer (DevSecOps Engineer)

Location

Sunnyvale, CA | United States

Job description

Job Title: Application Security Engineer (DecSecOps Engineer)

Location: Remote (US) - Cover Pacific Time Zone (PST) hours

Contract Type: Contract/C2C

We seek a talented and motivated Application Security Engineer/DevSecOps Engineer to join our team. In this role, you will identify, assess, and mitigate security risks in software products and play a crucial role in ensuring the security of our software products. You will implement security best practices throughout the Software Development Life Cycle (SDLC) and integrate security seamlessly into our DevSecOps processes.

Responsibilities:

• Implement and maintain Security Development Lifecycle (SSDLC) practices throughout the software development process.
• Manage Security System Development Life Cycle (SSDLC)
• Develop and maintain security policies, standards, and guidelines.
• Design, implement, and maintain secure coding practices and standards.
• Perform security code reviews and identify potential vulnerabilities.
• Conduct penetration testing and security assessments of products.
• Stay up-to-date on the latest security threats and vulnerabilities.
• Collaborate with developers to fix security vulnerabilities and improve the overall security posture of products.
• Participate in the DevSecOps process and integrate security practices into the development workflow.
• Document security processes and findings.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or related field
• Minimum of 10 years of Experience in application security.
• Experience with the Security System Development Lifecycle
• Experience with DevSecOps practices.
• Proven ability to identify, assess, and mitigate security risks in software products.
• Hands-on Experience with DevSecOps practices and tools.
• Strong understanding of common web application vulnerabilities.
• Experience with penetration testing tools and techniques.
• Familiarity with product security principles and practices.
• Excellent communication and collaboration skills.
• Ability to work independently and as part of a team.
• Experience with Black Duck and SBOM is preferred.

Job tags

Salary