Application Security Engineer :: Chicago/ Dallas:; Need Managerial References

Title: Application Security Engineer

Duration: 6 + Months

Interview: Video

Location: Chicago/Dallas Locals(Hybrid)

Visa: USC, GC, OPT/EAD, CPT/EAD, EAD/GC, H4/EAD

 

There will pre-screening round with vendor and my vendor is very technical, so please submit the profiles accordingly.

We will need the following for submission:

·        Full name

·        LinkedIn profile link

·        Visa copy and photo ID

·        3 managerial references- must be managers I cannot accept peer references. I will need full name, job title, company email, phone and LinkedIn profile link

Job Title:  Application Security Engineer
Worksite:  Chicago preffered, Dallas optional, Remote possible

Our Client has an Immediate Opportunity for an Application Security Engineer to support Application Security Testing for Cloud Application Development to meet regulatory requirements.

Develop custom Docker containers to pull results from vulnerability management tools, verify results using custom rules, and print results into report(s)

·        Application Security Testing – The use and maintenance of cloud and self-managed security scanning tools, manual source code reviews, and manual penetration assessments.

·        Vulnerability Management – The cataloging, reviewing for false positives and mitigations, threat and risk assessments, and lifecycle management through remediation according to SLAs of application vulnerabilities.

·        Release Management – Ongoing reviews of application releases to ensure only secure and reviewed code is pushed to prod, with automation tasks as necessary.

·        CI/CD pipeline – Develop scripts to integrate Security tools into the Jenkins pipeline and assist development teams with interpreting results from pipeline vulnerability verification reports to facilitate vulnerability remediation.

·        Documentation – Perform administrative and regulatory control activities including development of process and procedural documentation and gathering evidence for audits.

·        Process Improvement – Continually enhance current practices, assess current toolset, and help implement new tools and processes to enhance current security coverage.

·        Perform application security manual penetration tests and with penetration testing tools such as Burp Suite, Kali Linux, Postman.

SKILL AND EXPERIENCE REQUIRED: 

·        Gain an understanding of the system architecture and integrations.

·        Willingness to understand how the Security vulnerability management tools work and how reporting should be integrated 

·        Programming knowledge and coding experience, particularly Python, JSON, JAVA, and Bash

·        Experience working with APIs

·        Experiencing parsing (HTML, XML, etc.)

·        Proficient in GitHub and Jenkins

·        Docker experience in automating deployments and testing

 

Thank & Regards

Sneha Singhal || Technical Recruiter

D: 215-798-9528, E: sneha@firstringsolutions.com

First Ring Solutions LLC | Philadelphia, PA 19102

Note: Due to the high volume of calls, I may miss your call, email is the better way to reach me.