Application Security Engineer / Cyber Security Engineer

Application Security Engineer / Cyber Security Engineer
Location: Phoenix, AZ (Hybrid: 3 days onsite, 2 days remote)

Candidate Preference: Local candidates or those willing to relocate to Phoenix, AZ

Position Type: Full-time (Contract)

Duration: 18-24 months

Work Authorization: W2 Candidates Only

Years of Experience: 5+ years

Must-Have Skills:

SAST/DAST: Expertise in Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST)

Application Security: 3+ years of hands-on experience in application security

Communication Skills: Strong communication and collaboration abilities

Problem-Solving: Capable of identifying and managing complex issues

Financial Services Experience: Application security experience in the banking/financial services industry

Secure Coding: Hands-on experience with secure coding practices

Bug Bars: Knowledge or experience with bug bounty programs

Additional Skills (Preferred):

DAST Tools: Proficiency with specific DAST tools

SAST Tools: Proficiency with specific SAST tools, including Black Duck

Secure SDLC: Experience implementing secure SDLC methodologies

Threat Analysis: Knowledge of threat analysis and risk assessment

Responsibilities:

Conduct DAST/SAST/SCA scans to identify vulnerabilities in applications.

Provide security consulting to development teams, addressing issues related to data access, integrity, confidentiality, and business continuity.

Collaborate with development teams to remediate security defects.

Ensure adherence to secure coding practices throughout the development lifecycle.

Contribute to the development and implementation of secure SDLC methodologies.

Participate in threat analysis and risk assessments.