Web Application Security Engineer

Company: AMS Staffing Inc.
Location: New York
Posted on: January 16, 2020

Job Description:

Please send resume in Word format if you are interested in this Web Application Security Engineer opening in New York, NY 10018 (MIDTOWN). We will consider junior-mid-senior level candidates and the salary is in the $120K-$180K range UNBELIEVABLE BENEFITS (possible equity). If you are not interested, please refer colleagues/associates as we do have a referral bonus. We're growing at an incredible pace and are looking to grow out our Application Security Engineering team to help create a more secure application and protect our customers against security threats. You will work closely with our engineering teams to ensure security is part of our technology design and development workflows. Code reviews, security architecture reviews, and mentorship of engineers will be some of the tools you can wield to accomplish this. Additionally, you will assist with research and development of projects that we could implement in-house to push the state of the art of application security that will be built into our products. Architect, evaluate, build, and support security-focused tools and services Contribute code that improves security throughout our products Build mitigations and remediations for security vulnerabilities with your fellow engineers Identify and assess security risks, model threats, and develop mitigation plans Perform application security software and configuration reviews spanning a wide range of digital technologies (web, mobile, embedded) Perform cloud infrastructure reviews to ensure we build in a safe-by-default manner, minimizing access risks Support third-party audits of our application, including SOC2 and Pen Tests. Empower developers to do their job securely without creating unnecessary friction Educate your fellow engineers about security in application code and infrastructure. Promote security within and recommend new security products and technologies Advance your personal knowledge of application security to stay on the bleeding edge About you 3 years of experience and knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP and BGP) Experience protecting against and mitigating real-world attacks (DDoS, XSS, session-hijacking, SQL injection, CSRF, etc) Diverse range of security experience at the enterprise level (information, application, network, and IT) Knowledge of modern development and deployment processes used by consumer technology organizations Solid understanding of web, mobile, and embedded systems software development Solid understanding of modern developer platform and CI/CD practices Solid experience with web, mobile, and embedded systems application pentesting Experience reviewing source code (Rails/Java/ObjC/PHP/NodeJS/JS/etc) Experience reviewing cloud provider configs and deployment Solid experience using a scripting language such as Python, Ruby, etc. Solid understanding of Linux architecture and security You want to crush entire bug classes, not play whack-a-mole You want to work in a fast-paced, high-growth startup environment that respects its engineers and customers - provided by Dice

Keywords: AMS Staffing Inc., New York , Web Application Security Engineer, IT / Software / Systems , New York, New York