Job Details

Email to Friend Save Back

Lead Application Security Engineer

MCLEAN-22102, VA, US
08/01/2019

-

Required Skills

API applications

Company

Infinity Consulting Solutions, Inc

Experience

6 to 8 Year(s)

Job Description

Position Duties:

Drive our secure SDLC program with product development teams ensuring secure coding practices, SAST,
DAST, and pentesting activity occurs on a regular basis

Conduct threat modeling and static/dynamic application security testing with automated and manual testing techniques

Report and triage vulnerabilities; provide metrics, track, plan, and ensure timely remediation of open issues

Collaborate and communicate effectively with product and development teams to ensure security is championed throughout their processes

Provide remediation plans and status updates on vulnerability closure to clients on a regular basis

Coordinate and negotiate security pentesting activity with clients and 3rd party vendors

Assist in technical audit activity to ensure compliance with security policies and other industry standards (e.g. PCI, ISO27001, SOC1/SOC2)

Candidate Requirements:

6+ years of experience in application security, preferably with a coding/development background

Bachelor’s degree in an Information Technology related field of study or equivalent experience; relevant, industry recognized security certification such as CISSP, CEH, GWAPT

Strong knowledge of secure coding and application security testing practices

Experience testing web applications with common application security testing tools such as Checkmarx,
Burpsuite, and AppScan; experience testing mobile/API applications a plus

Exceptional communication, teamwork, and influencing skills that foster a collaborative and continuous-improvement environment

Ability to communicate technical issues to both technical and non-technical audiences

Ability to adapt to a hyper-growth pace and changing priorities

Ability to manage multiple, concurrent projects, activities, and tasks under tight time constraints

Self-motivation and the ability to work under minimal supervision