Application Security Engineers

Application Security Engineer Or DevSecOps Engineer 100% Remote Application Security Engineer or DevSecOps Engineer Can also be Sr. JAVA Developer with Extensive Security experience Application Development, Information Security, and/or DevSecOps Experience! Must have JAVA/JS Development and security testing experience Sr level relevant industrial security / DevSecOps / Application Security experience Provide security services and support for client application business groups. Interact directly with client colleagues to perform Application Security remediation assistance/services. Working experience interfacing with vulnerability management output (risks, issues, recommended remediation steps, code reviews, etc.)Pen Testing (Penetration Testing)OWASPSkillsFamiliar with integrating security tools and providing vulnerability assessments reviews. Leveraging tools such as Burp Suite Enterprise, Checkmarx, Now Secure, OWASP ZAPUnderstanding of OWASP Top 10 and SANS Top 25 vulnerabilities and how to remediate Understanding of application authentication/authorization, session mgmt., data masking/obfuscation. Working knowledge of using API to interact with web services provided by tools Assist application teams with plans for code changes Integrate with reporting tools to provide consolidated view Ability to turn application security standards into working practice Assist in driving consistency and standardization of DevSecOps services Previous application development experience (Java, preferred) Knowledge of security within on premise and cloud environments, including functional understanding of web application firewalls and their interaction with application. Ability to interface with both technical and non-technical teams