Application Security Engineer

Mindlance

Southlake, TX

JOB DETAILS
SKILLS
Agile Programming Methodologies, Analysis Skills, Applications Security, Architectural Analysis, Best Practices, Business Support, Code Reviews, Computer Security, Corporate Policies, Engineering, Enterprise Protection, Industry Standards, Information Assets, Information/Data Security (InfoSec), Internet Security, Leadership, Penetration Testing, Process Modeling, Production Systems, Protective Services, Requirements Management, Risk Analysis, Secure Coding, Security Analysis, Security Architecture, Security Attacks, Security Software, Software Design, Software Development, Software Development Lifecycle (SDLC), Software Engineering, Software Testing, Static Analysis, Test Plan/Schedule, Test Tools, Threat Modeling, U.S. National Institute of Standards and Technology (NIST)
LOCATION
Southlake, TX
POSTED
7 days ago
** On-site in Southlake (1 day remote) Backup options are Omaha and Orlando
** 12 months Extension is possible

Opportunity:
The Client Application Security team, operating under the leadership of the Chief Information Security Officer (CISO), is responsible for protecting Client's information assets in support of business objectives and in alignment with corporate policies. As a core function within Cybersecurity Services, the Application Security team leads the establishment and ongoing evolution of Client's Secure Software Development Program. This includes the creation and implementation of software security policies and best practices, providing security architecture guidance, conducting software security scanning and penetration testing, and educating developers and testers on secure coding practices.

The Software Security Engineer plays a key role in safeguarding software assets by strengthening the development process, enhancing security controls, and reducing defects and vulnerabilities in production environments.

Well qualified candidates for this position will demonstrate the following key traits:
Successful candidates will have prior engineering experience within a Software Security Assurance or Application Security team and a proven ability to partner effectively with development teams to balance security requirements with innovation. They will demonstrate strong analytical skills, including the ability to interpret large volumes of distributed data and translate it into clear, actionable insights. Candidates should also have experience working with a range of application security tools, including Software Composition Analysis (SCA), Static Application Security Testing (SAST), and secrets management solutions.

In addition, candidates will bring solid application engineering experience and a strong understanding of common application vulnerabilities, attack vectors, and remediation strategies. They should be familiar with secure software design principles and industry best practices for integrating security into the software development lifecycle. Experience with application security testing tools, and their integration into agile development environments is expected.

Candidates should have familiarity with recognized industry frameworks and standards such as OWASP, CIS, and NIST. A minimum of two years of experience working with static analysis or threat modeling tools is expected, along with experience implementing and scaling enterprise application security tools, services, and controls. Finally, candidates must demonstrate a strong understanding of secure coding practices, code review processes, threat modeling, security requirements analysis, and architectural risk assessment.

“Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”

About the Company

M

Mindlance