Application Security with AI AppSec, SAST/ SCA Docker HELM Charts DevOps / Jenkins Gradle Programming: Java, Python Cloud - AWS/Azure This Application Security Engineer will implement, and support solutions/technologies used for Static code analysis (SCA) & Static Application security testing (SAST) using industry leading tool. The engineer will be leading initiatives to improve application security posture by migrating infrastructure and re-configuring security tool services for Cloud/SaaS platform. Manage and support docker container, HELM charts, Rancher and automation with Java, Groovy and Python script. Updating and reconfigure build CI/CD jobs to integrate with security tools. Will look for ways to optimize security processes and recommend opportunities and solutions for improvement and automation. Support and participate in incident response and technical investigations as needed. Ensure adherence to compliance regulations and policies.
Is this a remote position? If not, what Client locations can a resource work and how many days a week will they be required to work onsite?
I assume it would be a hub position. NC, TX, MN would be the preference but open to other hub locations as well. No remote option
Can you please provide a summary of the project/initiatives which describes whats being done? - SAST tool migration from on-prem to SaaS Configuration, pipeline update and testing items are pending on this one. - BAU / App Sec support Provide support for dev teams with scan boarding, troubleshoot pipeline issues. - Automate routine support work along with creating documents for self-service. - OSA tool migration Migrate existing projects and teams from one OSA solution to another.
What are the top 5-10 responsibilities for this position? (Please be detailed as to what the candidate is expected to do or complete on a daily basis) - Update container images - Assist with Jenkins builds, onboard teams and troubleshoot issues - Automate support tasks - Setup, migrate and upgrade App Sec tools for SAST, OSA & DAST
What skills/technologies are required (please include the number of years of experience required)? - SAST, OSA, DAST - Jenkins, Gitlab - Docker container and cloud - Programming Java, Python & Gradle What skills/attributes are preferred (these are a desired, not required)? - Threat modelling, AI AppSec
What does the interview process look like? o How many rounds? 3 Rounds HR / Vendor screening, Technical, - & Product manager o Video, phone, or in person? Video
o How technical will the interviews be? 3
Are there any details about your department or team that may be helpful to know when sourcing candidates for this role and/or future roles with your group?
Make sure candidates have DevOps, Application Security, AI AppSec and cloud experience