Application Security Engineer

Company Overview:

Samsung SDS is the digital arm of the Samsung group and a global provider of cloud and digital transformation innovations. Samsung SDS delivers enterprise-grade solutions and services in cloud, secure mobility, analytics / AI, digital marketing and digital workspace. We enable our customers in government, financial services, healthcare, and other industries to drive business in a hyper-connected economy helping them to increase productivity, safeguard assets, and make smarter decisions.

Samsung SDS is entering on an exciting new chapter as we relocate our U.S. headquarters from New Jersey to Plano, Texas. This strategic move positions us for continued growth and innovation in one of the country's most dynamic business and technology markets. As we expand our presence in Texas, employees will have the opportunity to be part of a growing organization, contribute to transformative technology initiatives, and help shape the future of Samsung SDS in the U.S.

Position Summary

Samsung SDS is seeking a detail-oriented Information Security Engineer - Web Application Security to join our Cloud Security Team.

This role is responsible for conducting web application security assessments, managing application security assets, identifying and tracking vulnerabilities through remediation, and partnering with development and technical teams to address security risks.

The engineer will support secure software development practices by providing security guidance and training to developers, analyzing reported vulnerabilities, and assisting with remediation efforts. The role works cross-functionally with application developers, infrastructure and systems teams, information security, business units, and customers to identify risks and drive timely resolution of web application security issues.

Responsibilites

• Perform periodic security assessments and vulnerability testing of company and customer-facing web applications.
• Conduct security assessments for newly developed or newly deployed web applications before production release.
• Maintain and manage the inventory of web applications and related assets, ensuring accuracy and consistency of asset information.
• Identify, analyze, and document web application vulnerabilities and provide remediation recommendations to development and system teams.
• Track identified vulnerabilities through remediation and perform follow-up validation or retesting to confirm successful resolution.
• Provide security guidance and technical support to developers for vulnerability remediation.
• Develop and deliver secure development training for developers, including common web application vulnerabilities, secure coding practices, and vulnerability prevention.
• Investigate reported security concerns or vulnerabilities affecting specific websites and support the responsible teams in analysis, remediation, and validation.
• Prepare and maintain vulnerability assessment reports, remediation status, and supporting documentation.
• Collaborate with development, infrastructure, security, and customer teams to improve the overall security posture of web applications.