Senior Application Security Engineer

Project Description & Duties:     Application Assessment  Define and Champion best practice in Application Security implementation.  Knowledge transfer  Education and Training program development  Designs, codes, tests, debugs and documents complex operating software applications.

  Harden Applications against cross-site-scripting, sql-injection etc.(and once hardened they need to stay that way)  Participate in the testing process through test review, analysis, test witnessing and certification of software.  Will work with both externally facing applications and internally facing applications. 

Requirements:

 

Knowledge of:
Current information security concepts, practices, and principles.
Operating systems and access control mechanisms.
Authentication, authorization, provisioning, and directory services.
Regulations and laws pertaining to information security and access control.
Current application systems used within the organization, including authorization and authentication requirements.
Concepts, practices and procedures of systems analysis and programming.
Programming languages and scripting tools.
Best practices for access control systems.
Data integrity methods and techniques.

 

Secondary Skill Sets: 

 
Relevant Credentials: CISSP, GIAC, MicroSoft Security Development Lifecycle

 

*** Right candidate will be someone who has completed enterprise level Software Security Assessments and produced Road Maps based upon those assessments.  Additional experience should include the construction of finite sets of deliverables (both the short and long-term), implementation of best practices, the training of staff personnel and the making of presentations/recommendations to senior management.***