Application Security Engineer

Contract – Application Security Engineer

Rate:
Open

Hybrid: 3 days onsite, 2 days remote

Duration: 6+ months

• Programming knowledge and coding experience, particularly Python, JSON, JAVA, and Bash
• Experience working with APIs
• Proficient in Github and Jenkins
• Docker experience in automating deployments and testing

• Develop custom Docker containers to pull results from vulnerability management tools, verify results using custom rules, and print results into report(s)
• Application Security Testing – Build framework for continuous third-party vulnerability assessment and alerting
• Automation - Leveraging AI/ML for automation. Leverage APIs and Webhooks to automatically pull metadata, CVEs and exploit data from tools
• Vulnerability Management – Cataloging and reviewing for false positives and mitigations, threat and risk assessments, and lifecycle management through remediation according to SLAs of application vulnerabilities.
• CI/CD pipeline – Develop scripts to build and integrate Security tools into the Jenkins pipeline and assist teams with interpreting results from pipeline vulnerability verification reports to facilitate vulnerability remediation.
• Documentation – Perform administrative and regulatory control activities including development of process and procedural documentation and gathering evidence for audits.