What are the responsibilities and job description for the Application Security Engineer in Willmington, DE position at iFlow Inc.?
Role: AppSec/DevOpSec Security Engineer
Location: Wilmington, DE
Duration: 6 Months
We are seeking a highly skilled and motivated Appsec/DevSecOps Engineer to join our cybersecurity architecture and engineering team. This role is crucial for integrating security into our DevOps processes, ensuring the safety and compliance of our software development and deployment in the life sciences and pharmaceutical sectors.
Responsibilities
Must Have:
Location: Wilmington, DE
Duration: 6 Months
We are seeking a highly skilled and motivated Appsec/DevSecOps Engineer to join our cybersecurity architecture and engineering team. This role is crucial for integrating security into our DevOps processes, ensuring the safety and compliance of our software development and deployment in the life sciences and pharmaceutical sectors.
Responsibilities
Must Have:
- Deep knowledge of application security by adhering to OWASP top 10 and secure coding practices.
- Identify and mitigate vulnerabilities using tools like OWASP ZAP, Burp Suite, and Nessus
- Strong understanding or experience in API security and attack vectors.
- Strong in Secure CI/CD pipelines using Jenkins, GitLab CI/CD, and AWS CodePipeline.
- Deep knowledge of container security: Ensure the security of containerized applications using Docker and Kubernetes.
- Deep understanding of Serverless Workloads and Orchestration tools (AWS Lambda, Azure Functions, Kubernetes, HELM)
- Effectively communicate with stakeholders and internal customers.
- Knowledgeable of security frameworks (NIST, ISO 27001, PCI DSS, HIPAA, GDPR).
- Knowledge of preferred experience with FDA GxP regulations.
- Knowledgeable in Conduct gap assessments and develop remediation plans.
- Secure cloud environments (AWS, Azure, GCP) using tools like AWS Security Hub, Azure Security Center, and other cloud-based tools.
- Strong knowledge of IaC tools to manage multi-cloud configurations (AWS, Azure) like Terraform, Ansible and CloudFormation.
- Highly experienced in Automate security tasks and incident response using scripting languages (Bash, Python, PowerShell).
- Experience in monitoring tools like Prometheus, Grafana, and ELK Stack to detect and respond to security incidents.
- Experience in Secure CI/CD pipelines and implement SAST and DAST.
- Manage multiple security projects simultaneously.
- CDP, CDE, CSSLP (Certified Secure Software Lifecycle Professional) or equivalent
- Strong knowledge of cloud platforms (AWS, Azure). AWS/Azure Certified Security Specialist preferred.
- Strong understanding of networking, cryptography, and security protocols.
- Exceptional analytical skills, problem-solving abilities, and attention to detail.
