Application Security Engineer required for a Long Term Hybrid position in Albany, NY

Required Qualifications

·       8+ years Information Technology.

·       5+ years in software development role as a Developer, or Architect

·       Java/Web development with strong secure coding background in RHEL and JBoss.

·      3+years with Application Security Engineering conducting assessments, penetration testing, implementing tools for dynamic /automated code review, dynamic and static application scanning (Fortify, SonarQube); consulting on security designs of applications, potential vulnerabilities, and remediation, and creating training materials on key security concepts.

·     Hands-on experience assessing new code commits, pull requests, and architecture changes for vulnerabilities, misconfigurations, and compliance risks.

·   Hands-on experience integrating AI-driven code analysis platforms into CI/CD pipelines to identify vulnerabilities and insecure coding patterns before deployment.

·     Hands-on experience designing and executing a repeatable process to aggressively prioritize issue dispositions and remediations of security findings — while providing clear, concise status updates and risk reporting to leadership and stakeholders.

Skills:

·   Strong oral and written communication skills, with a demonstrated ability to  communicate complex topics to colleagues, and management.

·        Demonstrated collaboration and teaching abilities.

·        Strong analytical skills. 

·     Identify and resolve problems in a timely manner; gather and analyze information skillfully; develop alternative solutions.

·         Critical thinking and creative problem solving