Application Security

Experience with software security engineering practices, tooling, and risk assessments.

Strong technical skills in web related technologies (web applications, web services and Service Oriented Architectures), mobile (Android & IOS) and thick-client applications, APIs, and microservices.

Experience with creating threat models and conducting manual security code reviews.

Experience with manual and automated software testing, static/dynamic code analysis, software composition analysis, and fuzzing.

Experience with the OWASP Top 10 and the CWE Top 25.

Familiarity with OWASP, CAPEC, CWE, CVE, ATT&CK, NIST, ISO/IEC 27034frameworks.

Significant software development experience in one of the following core programming languages: Java, JavaScript, HTML, CSS, .NET, C++, Python, Terraform.

Cloud application security knowledge and experience with GCP, AWS, and Azure.

Familiarity with Azure DevOps, Kubernetes, Docker, Jenkins, Git, etc.

5 years of experience in Cyber Security, Computer Science, Information Technology, or Information Systems.

2+ years of experience developing web and API applications.

1+ years of experience developing iOS and Android applications.

1+ years of experience with a database like MySQL, Postgres, Oracle, or SQL Server.

3+ years of experience with coding and scripting: (PowerShell, Python, Java, or JavaScript)

Experience in Linux administration (basic commands and shell scripting).

Experience conducting application security testing.

Experience with security tools (e.g., Burp Suite, ZAP, Postman, Insomnia, sqlmap, SonarQube, Fortify, Webinspect, Invicti, Appscan, Sonatype, Checkmarx, Black Duck, Qualys, Contrast Assess, Imperva RASP, nmap, Kali Linux, Metasploit, etc.)

CSSLP, CISSP certifications preferred.

Bachelor's Degree in Arts/Sciences (BA/BS) in Information Security or Software Development with a real passion for the field.Additional years of relevant experience, training, and/or professional certifications will qualify in lieu of a degree.

Excellent analytical and interpersonal skills.

Ability to write and verbally communicate effectively to express technical information clearly to both technical and non-technical audiences.

Able to work independently and a self-starter who can execute using a combination of learned skills, professional networks, determination, and hard work to achieve objectives.