Developer; Application Security Engineer

This position will require you to be in the Greater Cleveland, OH Area
We are presently in a hybrid schedule, 2 days on campus and 3 days WFH

The Application Security Engineer's responsibilities include maintaining and improving the security posture of Over Drive to protect our patron and customer data and intellectual property. This role works primarily with the development and IT departments to ensure a high level of security within our applications through all phases of our SDLC as well as maintain compliance with regulatory standards such as PCI, GDPR, FERPA, CCPA, NIST CSF, etc.

To be qualified for this Application Security Engineer opening, you need to be able to write OO code, read OO code, and design and implement web applications.

• Assist with triage and remediation of vulnerabilities within the Over Drive environment.
• Advocate security best practices throughout the company but especially within the development department through short monthly presentations or threat modelling meetings.
• Review SAST findings for accuracy and risk to the custom code developed within the environment.
• Perform risk assessments on third party software and libraries to determine the safety of their use in the Over Drive environment.
• Research and review dependency vulnerabilities that are discovered in third party libraries.
• Conduct research to identify new attack vectors against Over Drive’s products and services.
• Perform application security pen tests against developed applications or work with third party vendors to perform yearly application reviews on larger applications.
• Gather, verify and report audit to allow for educated decisions on remediations.

• Bachelor’s Degree in Computer Science or related field or equivalent experience.
• Application development experience required – C#, Ruby and JavaScript preferred.
• Excellent interpersonal / communication skills.
• Well organized with strong attention to detail and ability to prioritize work.

As you’ve probably guessed, Over Drive is a place that values individuality and variety. We don’t want you to be like everyone else, we don’t even want you to be like us – we want you to be like you! So, if you're interested in joining the Over Drive team,
apply below and tell us what inspires you about Over Drive and why you think you are perfect for our team.

Over Drive values diversity and is proud to be an equal opportunity employer.