Security Developer

SMX Services & Consulting is looking for two Software Security Developers with emphasis on web applications. Must be passionate about security and staying ahead of all threats to the system. Determined to work with the development team to ensure that our applications and systems environment are watertight. Shall become thoroughly familiar with our architecture. Supply regular reports of potential vulnerabilities, risk profiles and action plans. Effective communication skills are critical to efficiently coordinate with management and development team with the final goal of building secure-end solutions. Responsibilities Actively look for security vulnerabilities in applications and system environments, reporting issues and describing practical solutions. Develop and promote software security strategies. Server patches validation Server vulnerability resolution Application vulnerability resolution Obsolescence tasks regarding servers, applications, databases, and runtime environments. Propose virtualization of eligible systems. Stay up to date with security news, keeping an eye out for the latest vulnerabilities and remedies appearing in the field. Actively liaise with the development team to ensure a secure and up to date architecture. Supply regular reports auditing our current services and latest changes, as well as our internal practices. Utilize multiple tools to conduct threat/vulnerability assessments and risk analysis. Ensure compliance, reduce litigation exposure, and support internal and industry security standards. Skills and Qualifications BS in Computer Science, Software Engineering or Computer Engineering. 3-4 years' experience as a Security Software Developer. Experience as a Systems Administrator for either Windows, Linux. Must be comfortable working with infrastructure related tasks. Thorough understanding of multiple development tools such as Xcode, Eclipse, Visual Studio, etc. Proficient knowledge of tools to conduct threat/vulnerability assessments and risk analysis such as Nessus, Kiuwan, etc. Thorough understanding of potential attack vectors such as XSS, injection, hijacking, social engineering, and so on. Familiarized with Concepts in Continuous Integration and Continuous Deployment. Programming proficiency in languages such as ASP.NET, C#, HTML, Java, JavaScript, JSP, Flutter, enough to understand the identification and implement proper fix to vulnerabilities on code. Working understanding of Agile Development processes. Candidate must be open to cloud infrastructure and cloud-oriented development. Familiarity with Azure or AWS is preferred. Excellent communication skills. (English/Spanish)