Application Security Container Engineer

***We are unable to sponsor for this 6+ Month contract to hire role***

Prestigious Global Firm is currently seeking an Application Security Container Engineer. Candidate will be developing custom Docker containers to pull results from vulnerability management tools, and verify results using custom rules.

Responsibilities:

• Application Security Testing – Build framework for continuous third-party vulnerability assessment and alerting
• Automation - Leveraging AI/ML for automation. Leverage APIs and Webhooks to automatically pull metadata, CVEs and exploit data from tools
• Vulnerability Management – Cataloging and reviewing for false positives and mitigations, threat and risk assessments, and lifecycle management through remediation according to SLAs of application vulnerabilities.
• CI/CD pipeline – Develop scripts to build and integrate Security tools into the Jenkins pipeline and assist teams with interpreting results from pipeline vulnerability verification reports to facilitate vulnerability remediation.
• Documentation – Perform administrative and regulatory control activities including development of process and procedural documentation and gathering evidence for audits.

Qualifications: 

• Programming knowledge and coding experience, particularly Python, JSON, JAVA, and Bash
• Experience working with APIs
• Experiencing parsing (HTML, XML, etc.)
• Proficient in Github and Jenkins
• Docker experience in automating deployments and testing