Application Security Engineer - SAST, DAST

Required Skills:

Develop policy and standards for API security.

Experience and knowledge in Application Programming Interface (API), static application security testing (SAST) and related tools like Veracode / Checkmarx / Fortiy.

Experience and knowledge in Burp Suite tool for dynamic testing (DAST).

Primarily responsible for API application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management)

At least 4 years of working experience in application security that includes API, SAST and DAST along with Checkmarx, Veracode

Primarily responsible for application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management).

Knowledge of security technologies (encryption, data protection, design, privilege access, etc.)

Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules

Excellent decision-making, analytical and problem solving skills

Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization

Strong knowledge of development and application security

Knowledge of information security principles, web applications, and intermediate familiarity with malicious code and common hacking techniques used by malicious actors

Experience conducting risk assessments and performing threat modeling of applications