About this role
Brimore is looking for a Senior Application Security Engineer to join our team. You will play a key role in finding and fixing application security issues along with helping define a Secure Software Development Lifecycle (SSDLC) and moving toward DevSecOps. The right candidate for this role will be experienced with software development, static and dynamic application security testing.
Main Responsibilities:
Execute various levels of security testing on mobile and web applicationsAutomate application scanning and vulnerability assessment processes to be part of CI/CD pipelinesValidate identified security issues within applications and recommend remediation proceduresCollaborate with Development on application security threat modelsWork with Product Teams to ensure features and functionality conform to security requirementsSupport internal audit controls related to application security
5+ years of work experienceStrong understanding of secure web application design principles and frameworks such as OWASPExperience with securing application cloud servicesExperience finding and validating insecure application features and codeExperience with development security scanning tools such as static and dynamic analysisExperience with application exploitation tools such as Metasploit or BurpsuiteExperience with containerization security practices a plusSecurity certification such as OSCP, GWAPT, or CompTIA PenTest+