About Us:

Founded in 1997, PruTech is dedicated to problem-solving, creating solutions, and maintaining strong partnerships with its clients. PruTech serves a diverse list of clients in different industries from government to finance, retail, and manufacturing. PruTech has offices in New York City, Washington DC, North Carolina, and two nearshore offices in Mexico City and India.

With over 20 years of Information Technology and system integration experience, PruTech provides multiple ways to assist organizations with future technology requirements including:

Project based system integration
Custom software solutions
Package implementations
Consulting and advisory services
Big data and analytics
Nearshore and offshore services

Application Security Engineer

Location: 9 MetroTech Center, Brooklyn, NY 11201- 3 days in office

Interview Type: in-person interviews.

Position Overview

The Application Security Engineer is embedded within the Application Development team and ensures security is integrated into all stages of software development. The role focuses on designing and building secure applications while working closely with application administrators who manage security tools and CI/CD pipelines.

This position is responsible for enabling developers to produce secure, resilient, and compliant software for FDNY s web, mobile, API, GIS, and cloud-based systems supporting Fire, EMS, and administrative operations.

Core Responsibilities

Secure Software Development

Establish and apply secure coding practices within the development team.
Define and enforce secure coding standards for Java, .NET, Python, and JavaScript applications.
Conduct secure design and architecture reviews for new and legacy systems.
Educate developers on secure coding practices, authentication/authorization best practices, and common application vulnerabilities.
Apply protections aligned with:
OWASP Top 10
OWASP API Security Top 10

Application & API Security

Design and implement secure REST APIs and web services.
Implement secure authentication/authorization using:
SAML2
OIDC
OAuth2
Secure Java and JavaScript applications, including:
Spring Boot
React
Ensure secure handling of tokens, sessions, and secrets.
Collaborate with App Admins and Security team to integrate applications into WAFs, load balancers, and other security monitoring tools.

Mandatory Qualifications

Minimum 4+ years in secure application development.
Prior hands-on software development experience.
Strong understanding of:
Web and mobile application architecture
Internet protocols (HTTP, HTTPS, WebSockets)
REST API security
Expertise in SAST, DAST, and SCA concepts (understanding results and remediation), in collaboration with App Admins.
Familiarity with security tools such as Veracode, Burp Suite, Zimperium, Prisma, Rapid7.
Experience applying NIST 800-53 and 800-171 controls at the application design level.
Strong analytical, troubleshooting, and problem-solving skills.
Ability to work independently within a development-focused team.

Preferred Qualifications

Experience with containerized applications (Docker, Kubernetes).
Knowledge of:
Core Java, J2EE, Spring Boot
React, AngularJS, HTML5, CSS, JavaScript
Experience designing secure GIS systems.
Familiarity with public safety or emergency response systems.

PruTech abides by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

Application Security Engineer

Similar Jobs