Senior Application Security / Product Security Engineer

A global energy company is looking to bring on a hands on a Senior Application Security Engineer to be part of a team building out their AppSec program from the ground up. This role is highly technical, and requires candidates with previous experience working in OT and/or embedded/software product environments. You'll perform code reviews, conduct SAST/DAST/SCA scans, identify vulnerabilities in software, firmware, and OT systems, while supporting product security incident response activities. Y

A global energy company is looking to bring on a hands on AppSec or Product Security Manager to own and run their Product / AppSec program and build it from the ground up. This role is both highly technical and customer facing, requiring previous experience building appsec programs from the ground up. You'll lead and mature their product and application security programs, while being hands on, integrating SAST and DAST into pipelines, overseeing and securing SDLC reviews, and serving as a custom

Mandatory Skill: Checkmarx Job Description: Experience SAST and SCA security tools; Checkmarx and CheckmarxOne.Experience developing new queries and customizing the existing security tools queries that are not out of the box to find new vulnerabilitiesExperience conducting end-to-end SAST and SCA analysis, using commercial application scanning tool.years of experience application onboarding, triaging, remediation with application teams and verifying proposed findings.Recent, hands-on development

Job Title: App Security Engineer Location: Chicago, IL 60666 (Remote with 10% Travel) Duration: 08 Months They must have Python software development experience and meanwhile have some extend of application security standard and verification experience. Top 5 Skill sets : 1. Software architecture and Python programming 2. Application security testing 3. AWS/Google Cloud Platform 4. Secure code review 5 DevSecOps Nice to have skills or certifications: 1. OWASP ASVS 2. Compliance frameworks 3. SSO