Application Security; AppSec Engineer

Requisition :178593

Job Level:Mid Level

Home District/Group:DHO Information Technology Group

Department:Technology Group

Market:Corporate Home Office

Employment Type:Full Time

The App Sec Engineer will provide technical support and guidance over the Kiewit Information Technology application security program. They willleadthe discovery, assessment, remediation, and validation of vulnerabilities related to custom developed applications. This position works closely with Kiewit application developers, solution architects, and platform administration teams to foster a culture of secure software development. This position is a balance of technical and soft skills to achieve a sustained and proactive reduction in risk.

Kiewit Technology Group builds solutions to enable and support our company's expansive operations. Our mission is to deliver projectscheduleand cost certainty by employing technology designed by and for the construction industry. Our teamutilizessystems and tools that manage every part of Kiewit's business and the project lifecycle to improve planning and day-to-day execution in the field. We give our people real-time data to make faster, smarter decisions.

This is a full time, in office role on our LaVista, NE campus. This is not a remote opportunity and requires daily in person attendance.

• Meet with development teams regularly to discuss security vulnerabilities in their applications and track remediation efforts.
• Review, test,andprioritizesecurity findings.
• Conduct penetration test on internal Kiewit systems/applications as needed.
• Analyze and develop threat models for Kiewit systems/applications.
• Proactively research andidentifysecurity gapsand work toremediate.
• Stay up to date with newattack techniques and security tools.
• Developandsupport custom build security tools.

Technical Skills

• 3-5 years’ experience as an application developer (.Netor Python).
• 2-3 years’ experience as a penetration tester.
• 2-3 years’ experience withcloudsecuritycontrols.
• Proficient with code scanning engines.
• Have a working knowledge of network technologies and security controls.

• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Passion forcybersecurity.
• Attention to detail and ability to work independently.
• Ability to work collaboratively in a team environment.
• Ability to present findings and recommendations to senior leadership

• Azure cloud administrationor development experience.
• Checkmarxscanningsuiteexperience.
• Systems integration experience.
• Experience developing applications with containers.

• Regular, reliable attendance
• Work productively and meet deadlines timely
• Communicate and interact effectively and professionally with supervisors, employees, and others individually or in a team environment.
• Perform work safely and effectively. Understand and follow oral and written instructions, including warning signs, equipment use, and other policies.
• Work during normal operating hours to organize and complete work within given deadlines. Work overtime and weekends as required.
• May work at various different locations and conditions may vary.

We offer our fulltime staff employees a comprehensive benefits package that’s among the best in our industry, including top-tier medical, dental and vision plans covering eligible employees and dependents, voluntary wellness and employee assistance programs, life insurance, disability, retirement plans with matching, and generous paid time off.

Equal Opportunity Employer, including disability and protected veteran status.