What are the responsibilities and job description for the Application Security Engineer position at NuStar Technologies?
Job Title : Application Security Engineer
Experience Required - 6 Years
Application security Engineer is responsible for ensuring the security of software application by identifying vulnerabilities, assessing risks and collaborating with development team to implement effective security measures. This role requires strong knowledge of application security principles, threat modelling and secure coding practices. Candidate must be able to generate customized reporting and will be responsible for defect triaging, exception handling and sign off.
Must Have Technical/Functional Skills
TCS Employee Benefits Summary
Discretionary Annual Incentive
Comprehensive Medical Coverage Medical and Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans
Family Support Maternal and Parental Leaves
Insurance Options Auto and Home Insurance, Identity Theft Protection.
Convenience and Professional Growth Commuter Benefits and Certification and Training Reimbursement.
Time Off Vacation, Time Off, Sick Leave and Holidays.
Legal and Financial Assistance Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
Experience Required - 6 Years
Application security Engineer is responsible for ensuring the security of software application by identifying vulnerabilities, assessing risks and collaborating with development team to implement effective security measures. This role requires strong knowledge of application security principles, threat modelling and secure coding practices. Candidate must be able to generate customized reporting and will be responsible for defect triaging, exception handling and sign off.
Must Have Technical/Functional Skills
- Proven experience in application security or secure software development
- Familiar with OWASP Top 10, NIST, ISO 27001 etc.
- Good understanding of secure coding practices
- Certifications like CEH, CISSP, OSCP
- Conduct security assessments and code reviews of applications to identify vulnerabilities and recommend remediation strategies
- Penetration testing on web applications
- Perform static and dynamic application security testing (DAT/SAST/SCA) using automated tools and manual techniques
- Collaborate with development team to integrate best practices into the SDLC
- Analyze security threats and risk related to applications and advise on mitigation strategies
- Conduct security training to developers
- Participate in third party vendor assessments
- DevSecOps integration knowledge , process stabilization and process improvement strategizing and planning
- Proficiency in tools like Checkmarx, Snyk, Burp Suite, Veracode, Sonarqube, postman etc
- Conduct API and mobile app for both Android and iOS security testing
- Remediation support for vulnerabilities, if needed
TCS Employee Benefits Summary
Discretionary Annual Incentive
Comprehensive Medical Coverage Medical and Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans
Family Support Maternal and Parental Leaves
Insurance Options Auto and Home Insurance, Identity Theft Protection.
Convenience and Professional Growth Commuter Benefits and Certification and Training Reimbursement.
Time Off Vacation, Time Off, Sick Leave and Holidays.
Legal and Financial Assistance Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
Salary : $100,000 - $140,000