Security Engineer
Fynbosys Inc
Dice Job Match Score™
🔢 Crunching numbers...
Job Details
Skills
- security
Summary
- Perform as an application security SME in the following areas: Web Applications, Mobile Applications, Databases, APIs, Containers and other domains.
- Support and maintain application security testing platforms and develop integrations with automation platforms
- Work with Application Development teams to review potential false-positive scan results and evaluate proposed mitigating factors
- Produce and track application security metrics
- Support the secure development and testing of critical Advisor and Investor LPL applications
- Mentor and educate product development and quality engineers on secure development and security best practices
- Monitor and review CVEs, industry developments, and provide inputs for continuous improvement
- Work with Internal Audit, IT Governance, IT Compliance and other key stakeholder groups on specific projects
- 5+ years of application security experience
- 5+ years of experience performing manual testing of APIs and web applications to identify/validate vulnerabilities.
- 5+ years of experience developing and maintaining enterprise security libraries, components, best practices checklists.
- 5+ years of experience performing application security risk evaluation, partnering with key stakeholders to further enhance application security CI/CD pipeline and continually assess security posture for improvement.
- 5+ years of experience creating and maintaining scan profiles for performing static, authenticated dynamic, IAST, and 3rd party library automated analysis with application scanning tools
- 5+ years of experience with reviewing and analyzing vulnerability scan results and tracking closure of vulnerabilities
- Understanding of OWASP Top 10 Critical Web Application Security Risks, their identification, and architecture, design, coding patterns to mitigate them
- Knowledge of secure coding best practices, secure SDLC, secure architecture, and DevSecOps methodologies
- Strong analytical, interpersonal and communication skills
- Bachelor’s Degree or equivalent in Information Security, Engineering or Computer Science.
- Application development and Security Engineering or Security Architecture experience
- Experience using Application Security Code Scanning Tools such as Synopsys, BlackDuck, J-Frog, PrismaCloud, API scanners as well as manual tools such as Burpsuite and Postman
- Experience working with security of applications developed in C#, Java, and web (HTML, CSS, JS, React, Angular, REST) technologies
- Experience working with DevSecOps and CI/CD pipelines
- Dice Id: 10494738
- Position Id: 9114540
- Posted 13 hours ago
Company Info
About Fynbosys Inc
Fynbosys is a leading software & services company in California, and is headquartered in Sacramento. Our company's philosophy is to Develop the Future and we are known for anticipating and responding rapidly to our customer's present and future needs. Fynbosys is a software development company and we develop software solutions along with applications and management solutions, as well as support, training, and consulting services to customers
Our complete spectrum of professional management and engineering services ensures the successful definition, execution, and completion of mission-critical programs. We bring the requisite subject matter expertise to support our customers with their systems, software engineering, sales management system, document imaging and digitization system and training needs.
We are your industries partner, we know your business, and it's our business to help you succeed at yours. For the past few years, we've been doing just this and as a result, we've built enduring relationships with all our Clients.
