Associate Application Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Protect and defend applications by recommending configuration modifications, adjustments, and enhancements for web application security controls while monitoring and reporting on unusual events.

• Collaborate with application and infrastructure teams to ensure efficient protection measures and responses.

• Perform application evaluations and security tests alongside the testing team.

• Maintain, enhance, and broaden the scope of application assessments and penetration tests.

• Utilize advanced tools and instruments for application evaluations and assessments.

• Document, triage, and track vulnerabilities and exposures, while also providing assistance and advice on remediation strategies.

• Identify and monitor risks and exposures, generate leads for assessments, and document operational processes and procedures.

⛳️ Requirements

• A Bachelor of Science degree in Cybersecurity, Computer Science, or a related technical field, along with equivalent professional experience.

• Proficient in web vulnerabilities, web attack vectors, and web vulnerability remediation within contemporary web frameworks.

• Familiarity with cloud platforms (AWS, Azure, GCP) and their inherent security tools.

• Experience with security testing tools such as BurpSuite, nmap, Metasploit, and security testing distributions like Kali Linux.

• Knowledge of data analysis and SIEM tools (e.g., Grafana, Opensearch, CS NextGen SIEM) for log monitoring and analysis.

• Strong understanding of networking principles and familiarity with network protocols (HTTP/HTTPS, TCP/IP, DNS) and web technologies (HTML, JavaScript, APIs).

• Basic scripting skills in Python, Bash, and PowerShell.

• Proficient in using terminals, scripting, and automation for WAF automation scenarios.

• Ability to convert complex technical vulnerabilities, threat impacts, and remediation priorities into actionable, risk-assessed reports for both technical and non-technical audiences.

🏝️ Benefits

• Unique initiatives that provide both personal and professional satisfaction.

• Celebrations of diversity and inclusion.

• Employee wellness programs.