Application Security Engineer
- Nityo Infotech
1 Days Ago
NA
Yearly
Hartford-CT, Houston-TX
8-10 Years
Required Skills: Application Security, Threat Modeling, STRIDE, PASTA, Attack Trees, ATT&CK, OWASP, CWE vulnerability identification, Authentication, authorization, Encryption, Logging, monitoring, Infrastructure, network security, OS hardening, CI/CD, SDLC, DevOps, Penetration testing, Technical architecture design, Docker, Kubernetes, Helm, Serverless, GitOps, Cloud Development Kit, CDK
Job Description
Required Skill and Experience
• Threat Modeling such as: (STRIDE, PASTA, Attack trees, tooling, Att&ck) is an added advantage.
• Identifying vulnerabilities using CWE or OWASP.
• Security practices pertaining to: authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation is required.
• Operating systems and their hardening.
• Development concepts (such as: CICD, Pipelines, SDLC).
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation) is a plus.
• Cloud Development Kit (CDK), GitOps.
• Understanding of docker/K8S/serverless/helm.
• Support or perform pen testing.
• Design and review technical architectures.
• Identifying vulnerabilities using CWE or OWASP.
• Security practices pertaining to: authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation is required.
• Operating systems and their hardening.
• Development concepts (such as: CICD, Pipelines, SDLC).
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation) is a plus.
• Cloud Development Kit (CDK), GitOps.
• Understanding of docker/K8S/serverless/helm.
• Support or perform pen testing.
• Design and review technical architectures.
Preferred Skill and Experience
• Experienced working in a Cyber-Security or Information Security is a bonus
• Threat Modeling using a documented process.
• Development of automation tools as required.
• Operating in a DevOps / agile team structure.
• Jira or other ticketing systems is an added advantage.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams.
• Work with little supervision to complete work
• Analytical, diligence and attention to detail.
• Eagerness to research using vendor documentation.
• Create and maintain quality documentation.
• Experience of regulated environment.
• Adversary mindset.
• Work with diverse set of people and teams.
• Constant learner of new technologies and methodologies.
• Problem solver.
• Communication and collaboration skills.
• Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks is a plus
• Threat Modeling using a documented process.
• Development of automation tools as required.
• Operating in a DevOps / agile team structure.
• Jira or other ticketing systems is an added advantage.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams.
• Work with little supervision to complete work
• Analytical, diligence and attention to detail.
• Eagerness to research using vendor documentation.
• Create and maintain quality documentation.
• Experience of regulated environment.
• Adversary mindset.
• Work with diverse set of people and teams.
• Constant learner of new technologies and methodologies.
• Problem solver.
• Communication and collaboration skills.
• Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks is a plus
