Role: Senior Application Security Engineerlocation: Irvine, CA (Hybrid)

Duration: 6-month contract with possibility of extension

Client is looking for a Senior Application Security Engineer.

Qualifications:

• Experience with Invicti DAST and Synk.
• Subject matter expertise in application security and vulnerability assessments.
• Strong knowledge of OWASP Top 10 (2013 and/or 2017 Version) vulnerability detection and mitigation.
• Prior experience with Veracode SAST, DAST, and Nexus IQ would be a plus.
• Familiarity in .NET or Java is desirable.
• Familiarity with IDEs, e.g. Visual Studio, Eclipse, or IntelliJ IDEA.
• Familiarity with ServiceNow, and Jira.
• Familiarity with build systems such as Bamboo, Jenkins, and AWS native build tool.
• High degree of accuracy and attention to detail.
• Excellent organizational skills and ability to multitask.

Responsibilities:

• Assist in onboarding application teams and applications to Secure SDLC controls (e.g., SAST, DAST) including remediation guidance, issue tracking, and metrics.
• Assist in the integration of security tools (e.g., DAST, SAST, SCA, etc.) in the delivery pipeline and the S-SDLC process.
• Provide remediation coaching to development teams on how to build a more secure application, including explanations of risk assessment, e.g. likelihood, impact, and the OWASP Top 10.