Application Security Engineer - Threat Modeling/SAST/SCA Job Code IND_090724_1
Netsentries Application Security Engineers will perform code-aware security assessments, Threat Modeling, SAST, SCA, Security Engineering reviews, etc., of enterprise Web/Mobile applications on different platforms developed in various programming languages. They will work closely with the Netsentries AppSec and client development teams to remedy the identified vulnerabilities.
Core responsibilities include:
ā¢ Perform in-depth static secure code analysis with open source and commercial tools
ā¢ Perform Threat Modeling and in-depth manual secure code reviews
ā¢ Perform security engineering reviews
ā¢ Reverse Engineering App binaries and analyzing the decompiled/disassembled code
ā¢ Prepare advisory for developers of the application on secure coding practices for addressing vulnerabilities identified
ā¢ Experience with assessments based on standards like etc.
ā¢ Collecting evidence to demonstrate the findings
ā¢ Collaborating with client-side application security and development teams
ā¢ Handle enterprise SAST projects involving a variety of programming languages including and not limited to web applications with Java, .NET, etc., Android and iOS mobile applications programming languages
ā¢ Execute code-aware security assessments in adherence with industry standards like
ā¢ OWASP ASVS,OWASP MASVS,OWASP Top10, OWASP Mobile Top 10, SANS 25, PCI-DSS, HIPAA, MITRE-CWE etc.
Experience with enterprise SAST projects involving a variety of programming languages including and not limited to web applications with Java, .NET, etc., Android and iOS mobile applications programming languages
Skills Required:
ā¢ A degree in computer science or related field and/or equivalent experience in software development.
ā¢ Exposure to industry standard development practices and programming languages would be a plus.
ā¢ Demonstrable understanding of enterprise architectures and best practices for high-volume, high-availability web / mobile apps.
ā¢ Excellent interpersonal communications skills.
ā¢ Experience with Android / iOS mobile platforms
ā¢ Experience in performing secure code reviews / reviewing results of static analysis tools
ā¢ Knowledge of Common Weakness Enumeration (CWE) and Common Vulnerabilities & Exposures (CVE) and their remediation recommendations
ā¢ Familiarity of vulnerabilities and attack methods, including Remote Code Execution (RCE), Cross-Site Scripting (XSS), SQL Injection (SQLi), etc. and how to identify, trace and remediate them
ā¢ Understanding of OWASP Top 10
ā¢ Certifications like OSWE is preferred
ā¢ Experience working with commercial SAST/SCA solutions like Checkmarx,Veracode,Synopsis etc. is an advantage.
Apply Now
Apply Now
Core responsibilities include:
ā¢ Perform in-depth static secure code analysis with open source and commercial tools
ā¢ Perform Threat Modeling and in-depth manual secure code reviews
ā¢ Perform security engineering reviews
ā¢ Reverse Engineering App binaries and analyzing the decompiled/disassembled code
ā¢ Prepare advisory for developers of the application on secure coding practices for addressing vulnerabilities identified
ā¢ Experience with assessments based on standards like etc.
ā¢ Collecting evidence to demonstrate the findings
ā¢ Collaborating with client-side application security and development teams
ā¢ Handle enterprise SAST projects involving a variety of programming languages including and not limited to web applications with Java, .NET, etc., Android and iOS mobile applications programming languages
ā¢ Execute code-aware security assessments in adherence with industry standards like
ā¢ OWASP ASVS,OWASP MASVS,OWASP Top10, OWASP Mobile Top 10, SANS 25, PCI-DSS, HIPAA, MITRE-CWE etc.
Experience with enterprise SAST projects involving a variety of programming languages including and not limited to web applications with Java, .NET, etc., Android and iOS mobile applications programming languages
Skills Required:
ā¢ A degree in computer science or related field and/or equivalent experience in software development.
ā¢ Exposure to industry standard development practices and programming languages would be a plus.
ā¢ Demonstrable understanding of enterprise architectures and best practices for high-volume, high-availability web / mobile apps.
ā¢ Excellent interpersonal communications skills.
ā¢ Experience with Android / iOS mobile platforms
ā¢ Experience in performing secure code reviews / reviewing results of static analysis tools
ā¢ Knowledge of Common Weakness Enumeration (CWE) and Common Vulnerabilities & Exposures (CVE) and their remediation recommendations
ā¢ Familiarity of vulnerabilities and attack methods, including Remote Code Execution (RCE), Cross-Site Scripting (XSS), SQL Injection (SQLi), etc. and how to identify, trace and remediate them
ā¢ Understanding of OWASP Top 10
ā¢ Certifications like OSWE is preferred
ā¢ Experience working with commercial SAST/SCA solutions like Checkmarx,Veracode,Synopsis etc. is an advantage.
Apply Now
Apply Now